Credentials and encryption secrets reference

API Connect user credentials and database encryption secrets that are managed with the apicup certs command.

The apicup certs command is used to manage various credentials and encryption secrets that are used by API Connect management and portal subsystems.
Note: For details of the TLS certificates that you can manage with the apicup certs command, see Certificate reference VMware.

Management subsystem credentials and secrets

The following table lists all the secrets and credentials that are returned from the apicup certs list <management subsystem> command:
Table 1. Management subsystem credentials and secrets
Secret or credential name Description
atm-credential

Credential used in internal API Connect communication.

Do not modify this credential.
consumer-toolkit-credential

Credential used in internal API Connect communication.

Do not modify this credential.
consumer-ui-credential

Credential used in internal API Connect communication.

Do not modify this credential.
database-backup-auth-ssh-key SSH key for authentication with a remote SFTP backup server.
designer-credential

Credential used in internal API Connect communication.

Do not modify this credential.
encryption-secret

A 128-bytes long encryption secret that is used to do field level encryption in the management subsystem database.

If you want to modify this credential, open a support case.
juhu-credential

Credential used in internal API Connect communication.

Do not modify this credential.
toolkit-credential

Credential used in internal API Connect communication.

Do not modify this credential.
ui-credential

Credential used in internal API Connect communication.

Do not modify this credential.

Portal subsystem credentials and secrets

The following table lists all the secrets and credentials that are returned from the apicup certs list <portal subsystem> command:
Table 2. Portal subsystem credentials and secrets
Secret or credential name Description
encryption-secret A 128-bytes long encryption secret that is used to do field level encryption in the portal subsystem database.
original-encryption-secret

A copy of the encryption-secret that was first used to generate the Kubernetes secret name.

Do not modify this secret.
site-backup-auth-ssh-key Authentication key for your remote portal backup SFTP server.