Encrypt sa and Vault Admin passwords in the backup script

[Richard.Rankin]

The Admin Password is written in clear text in the backup script.

This also is true for the sa credentials if a different account than the default is used.

The wish to find a way to avoid putting these passwords into a clear text file to conform with security policies.

Two possible workarounds are documented in this article.

Encrypt Vault Administrator and SQL Administrator password in Vault backup script

[Richard.Rankin]

Another possible solution would be for Vault to support using an SQL Backup Operator purely for the backup.

[RajSchmidt]

I agree with you. Although one could argue that you have quite different problems if an attacker gets as far as reading the backup script.

[Anonymous]

this functionality is very useful. it should be added.