[Suggestion] promote storing unseal codes/username and passwords in a secure storage

[jehadbaeth]

Needs more investigation

I'm still looking at how blox is handling seal tokens. here's my line of thoughts:

Do they need to use a different way of sealing/unsealing the vault? i.e.

• https://www.vaultproject.io/docs/auth/aws
• https://www.vaultproject.io/docs/auth/userpass.html
• https://www.vaultproject.io/docs/auth/ldap.html

if they are going to use a token or a user/pass how should it be stored? an external 3rd party encrypted password manager would work or do they need a more convenient way for rapid access??

[vu3rdd]

I am wondering if this is out of scope as far as the current audit is concerned. Blox has a desktop app and perhaps this should live as part of that desktop app documentation?