Create a secret group with criteria

Secret groups organize secrets and apply access policies at the group level. Associate a secret group with an identity group to control MID Server access.

Before you begin

Role required: admin, sn_kmf.admin, sn_secrets.admin

Procedure

Navigate to All > Secrets Management > Secret Groups with Criteria.
Select New to create a Secret Group with Criteria record.

In the form, fill in the following fields.

Field	Value
Group name	Name of the secret group. This name can be any name you choose.
Secret type	Select Client accessible
Autogen module	Check the box
Short description	Description of the secret group. Enter a value that indicates what this group is being used for.
Criterion type	Select Target table
Target table	Select SSH Credentials [ssh_credentials]

Select and hold (or right-click) the form header and select Save from the context menu to save the record.
Make sure that the Active check box isn't checked.
Select the Manage client side access button to create an identity group.

An Identity group alias window displays.
Select the New button.
Select the reference icon (

Image omitted: magnifying\_glass.png
reference button\) next to the **Identity group alias** field.

In the Group Alias Name field, enter a value.

This name can be any value you want.
If you chose a unique name in Step 9, select Submit.
Select the Upload identity key button.

The Import identity public key certificate window displays.
In the Identity key alias field, enter a value.

Important: This value can be anything you want, but it must be an exact match for what you insert into the MID Server in later steps.
Select Import

The Attachment window displays.
Select Choose file.
Select the public certificate that you created in the earlier steps.

This certificate should be the sm_public_cert.pem file.
Select the X icon to close the window.
Select OK to close the Import identity public key certificate window.

A blue Keys and certificates are successfully imported to the instance banner displays confirming a successful import.
Select Submit.

The Identity groups list displays.
Select the check box to the left of your identity group record in the list.
Select the Associate secret group button.

You're returned to your Secret Group with Criteria record. The Secret Group – Identity Group Alias” and Secret Group – Identity Group related lists are visible. These related lists display the records that you created in the previous steps.
In the Secret Group – Identity Group related list, select the Created field for the record on that list.

Image omitted: client-side-4.png
Created field in the Secret Group – Identity Group related list

An **Identity group** record displays.

In the Identity group members related list, select the New button.

A Identity group member record displays.
In the Member table field, select MID Server [ecc_agent].
Select the reference icon (

Image omitted: magnifying\_glass.png
reference button\) next to the **Identity group member record** field, and select your MID Server.

**Note:** If you enable the **Include all records** check box, all MID Servers connected to your instance are added to the identity group.

Select OK to close the Select the document window.
Select Submit.
Navigate back to All > Secrets Management > Secret Groups with Criteria and open the record you created in step 2.
Enable the Active field.
Select Update to save the record.

Parent Topic:Configuring client accessible secrets