Consensys / tessera

Tessera - Enterprise Implementation of Quorum's transaction manager
https://docs.tessera.consensys.net/
Apache License 2.0
175 stars 105 forks source link

Tessera connection to external DB using Managed Service Identity #1495

Open sushilsaha1111 opened 1 year ago

sushilsaha1111 commented 1 year ago

Today we have the option for Tessera to connect to external DB (such as MySQL DB) using the JDBC url, using Username & Password. There is an option to encrypt the password to make the connection process more secure - https://docs.tessera.consensys.net/en/stable/HowTo/Configure/Database/#database-password-encryption.

However, an option to use Managed Service Identity (MSI) provided by AAD for authentication is not supported by Tessera. MSI is more secure and easy to use as the lifecycle of underlying identity including rotation is completely managed. I want to check if enabling MSI is in the pipeline for future releases of Tessera.