Can I connect ThingWorx on Prem to Azure Key Vault?

[MG_9567080]

We have several instances of ThingWorx and would like to utilize Azure Key vault. Is there a built in way to easily integrate ThingWorx to read from Azure Key Vault? We have enterprise databases used across instances, so when we migrate each one from Dev/Test/Prod we need to update the passwords. Unfortunately we are unable to use Solution Central. 

[VladimirN]

Can this help? From "Help Center" - "Step 7. Set Up Encryption for Azure IoT Hub Credentials": https://support.ptc.com/help/thingworx_scm_azure/r3.0/en/index.html#page/thingworx_scm_azure/azure_connector/c_azure_connector_set_up_encryption_for_azure_hub_credentials.html 

[Constantine · Accepted solution]

I guess you migrate your application between Dev/Test/Prod using some CI/CD pipeline? Then I'd suggest you integrate the latter with your Key Vault, and inject those credentials into ThingWorx through a service exposed via REST API.

[geva]

Agreed with Constantine that this likely goes into your CI/CD pipeline.  Other options to consider depending on how you're running those environments is using using environment variables combined with Jinja configuration files (ie: container deployment) and you could them tie Kubernetes secret provider to the Key Vault.