Container Orchestration

Containers

DevOps

HashiCorp

Certification

HashiCorp Certified: Vault Operations Professional 2022

Master HA/DR setup, performance tuning, HSM unseal, monitoring/auditing, advanced auth control, and agent templating.

Bryan Krausen

HashiCorp Ambassador

HashiCorp Certified: Vault Operations Professional 2022

Fill this form to get a notification when course is released.

Enroll for Free

Subscribe Now

Enroll Now

Already Subscribed? Log in

Enroll in this Course

Lessons

Challenges

117

Topics

What you’ll learn

Introduction to Vault and its key features
Installation and configuration of Vault
Vault secrets management and encryption
Vault policies and access control
Secure communication using Vault
Vault enterprise features and management
Vault integration with other HashiCorp tools,
Best practices for using Vault in production environments

Our students work at..

Description

Introduction to Vault and its key features
Installation and configuration of Vault
Vault secrets management and encryption
Vault policies and access control
Secure communication using Vault
Vault enterprise features and management
Vault integration with other HashiCorp tools,
Best practices for using Vault in production environments

About the instructor

Bryan Krausen, currently the VP of Consulting Services at River Point Technology, has a rich background in tech, starting from 2001.

His platform experience includes strong AWS and VMware virtualization skills, data center design, and implementation. He is adept with HashiCorp products and infrastructure as code development.

Bryan has co-authored the book "Running HashiCorp Vault in Production" and authored several HashiCorp Vault and Terraform courses.

His certifications include HashiCorp Vault and Consul, along with numerous AWS certifications. Bryan actively participates in community groups and has held leadership roles in Louisville VMUG and AWS User Group.

No items found.

Course Content

Expand All

Introduction

Topics

Lesson Content

Course Introduction (21:52)

HashiCorp Documentation Review (10:55)

Join our Community

Create a working Vault server configuration given a scenario

Topics

Lesson Content

Section Overview – Create a Working Vault Server Config (14:26)

Enable and Configure Secrets Engines (12:25)

Key/Value Secrets Engine (14:38)

Working with the Key/Value Secrets Engine (16:05)

Demo – Key/Value Secrets Engine Version 1 (08:42)

Demo – Key/Value Secrets Engine Version 2 (23:52)

Database Secrets Engine (23:49)

Demo – Database Secrets Engine (16:28)

Hands-On Lab – Database Secrets Engine

Identity Secrets Engine (18:26)

Demo – Identity Secrets Engine (09:26)

Transit Secrets Engine (33:02)

Demo – Transit Secrets Engine (14:43)

Hands-On Lab – Transit Secrets Engine

PKI Secrets Engine (22:34)

Demo – PKI Secrets Engine (08:10)

Cubbyhole Secrets Engine (16:10)

Demo – Cubbyhole Secrets Engine (11:44)

Hands-On Lab – Cubbyhole and Response Wrapping

Vault Security Hardening (27:06)

Auto Unsealing Vault (27:25)

Demo – Auto Unseal Vault (10:55)

Hands-On Lab – Auto Unseal

Implementing Integrated Storage (26:25)

Demo – Integrated Storage (11:57)

Demo – Integrated Storage Snapshots (06:59)

Enable and Configure Auth Methods (16:18)

AppRole Auth Method (24:11)

Demo – AppRole Auth Method (05:42)

Hands-On Lab – AppRole Auth Method

Userpass Auth Method (10:25)

Demo – Userpass Auth Method (04:38)

Hands-On Lab – Userpass Auth Method

Vault Tokens – Auth Method (11:40)

Hands-On Lab – Vault Tokens

Secure Vault Initialization (12:37)

Demo – Practice secure Vault initialization (06:42)

Hands-On Lab – Secure Vault Initialization

Regenerating a Root Token (11:36)

Demo – Regenerating a Root Token (06:11)

Hands-On Lab – Regenerating a Root Token

Rekey Vault and Rotate Encryption Keys (15:30)

Demo – Rekey Vault and Rotate Encryption Keys (07:59)

Hands-On Lab – Rekey Vault and Rotate Encryption Keys

Quiz 1

Feedback

Resource – Create a working Vault server configuration given a scenario

Monitor a Vault Environment

Topics

Lesson Content

Section Overview – Monitor a Vault Environment (10:42)

Monitor and Understand Telemetry (10:42)

Monitor and Understand Audit Logs (12:53)

Demo – Audit Logs (05:15)

Hands-On Lab – Audit Logs

Monitor and Understand Operational Logs (08:33)

Demo – Vault Operational Logs (04:56)

Quiz 2: Monitor a Vault Environment

Feedback

Resource – Monitor a Vault Environment

Employ the Vault Security Model

Topics

Lesson Content

Section Overview – Employ the Vault Security Model (01:22)

Secure Introduction of Vault Clients (14:52)

Running Vault in Kubernetes (06:24)

Quiz 3: Employ the Vault Security Model

Resource – Employ the Vault Security Model

Build Fault-Tolerant Vault Environments

Topics

Lesson Content

Section Overview – Build Fault-Tolerant Vault Environments (01:14)

Configure a Highly-Available Vault Cluster (18:39)

Demo – Build an HA Cluster Manually (07:25)

Demo – Build an HA Cluster Using Retry_Join (06:19)

Demo – Build an HA Cluster Using Auto_Join (09:33)

Hands-On Lab – Build an HA Cluster

Enable and Configure Disaster Recovery (DR) Replication (35:21)

Demo – Disaster Recovery (DR) Replication (13:53)

Hands-On Lab – Configure DR Replication and Promote a Secondary Cluster

Promote a Secondary Cluster (07:34)

Demo – Promote a Secondary Cluster (06:20)

Quiz 4: Build Fault-Tolerant Vault Environments

Feedback

Resource – Build Fault-Tolerant Vault Environments

Understand the Hardware Security Module (HSM) Integration

Topics

Lesson Content

Section Overview – Understand the Hardware Security Module (HSM) Integration (02:09)

Benefits of Auto Unsealing with HSM (12:36)

Benefits and Use Cases of Seal Wrapping (05:33)

Quiz 5: Understand the Hardware Security Module (HSM) Integration

Resource – Understand the HSM Integration

Scale Vault for Performance

Topics

Lesson Content

Section Overview – Scale Vault for Performance (00:45)

Using Batch Tokens (15:24)

Demo – Batch Tokens (09:52)

Hands-On Lab – Batch Tokens

Performance Standby Nodes (14:23)

Enable and Configure Performance Replication (15:38)

Demo – Performance Replication (08:48)

Create a Paths Filter (10:19)

Quiz 6: Scale Vault for Performance

Feedback

Resource – Scale Vault for Performance

Configure Access Control

Topics

Lesson Content

Section Overview – Configure Access Control (01:44)

Vault Identity Entities and Groups (20:57)

Vault Policies – Part 1 (20:47)

Vault Policies – Part 2 (23:03)

Understanding Sentinel Policies (22:28)

Control Group (14:06)

Vault Namespace (22:23)

Demo – Namespace (16:50)

Hands- On Lab Namespace

Quiz 7: Configure Access Control

Feedback

Resource – Configure Access Control

Configure Vault Agent

Topics

Lesson Content

Section Overview – Configure Vault Agent (00:50)

Vault Agent Auto-Auth and Token Sink (15:55)

Vault Agent Templating (12:35)

Demo – Vault Agent (12:32)

Quiz 8: Configure Vault Agent

Hands-On Lab – Vault Agent

Resource – Configure Vault Agent

Exam Experience and Expectations

Topics

Lesson Content

Exam Experience and Expectations (18:27)

Feedback

Resource – Exam Experience and Expectations

Frequently Asked Questions

Who are KodeKloud courses for?

KodeKloud courses are designed for learners at different skill levels, from beginners to experienced IT professionals looking to develop or strengthen their technical skills.

Do KodeKloud courses include hands-on practice?

Yes. Many KodeKloud courses include hands-on labs and practical exercises that let you apply what you learn in real-world environments.

Do I need any prior experience to take a KodeKloud course?

Prerequisites vary by course. Each course page provides information about the recommended knowledge or experience you may need before starting.

Can I learn at my own pace?

Yes. KodeKloud courses are designed for self paced learning, so you can learn according to your schedule and revisit lessons and practice activities as needed.

Can I access KodeKloud courses on mobile devices?

Yes. KodeKloud can be accessed through supported web browsers and mobile devices, allowing you to learn from different devices.

Do KodeKloud courses provide certificates?

Certificate availability depends on the course and your KodeKloud plan. Check the individual course page or your account for the applicable certificate details.

How long does it take to complete a KodeKloud course?

Course completion time varies depending on the course length, your prior experience, and how much time you spend on hands-on practice.

Can I practice while taking the course?

Yes. Courses that include hands-on labs allow you to practice concepts as you progress through the lessons.

How do I start learning a KodeKloud course?

Choose a course that matches your learning goals, review its requirements and curriculum, and select the available subscription option to start learning.

Fill this form to get a notification when course is released.