Skip to main content
MG_956708012-Amethyst
12-Amethyst
Mar 14, 2023 1:24 PM UTC
Solved

Can I connect ThingWorx on Prem to Azure Key Vault?

We have several instances of ThingWorx and would like to utilize Azure Key vault. Is there a built in way to easily integrate ThingWorx to read from Azure Key Vault? We have enterprise databases used across instances, so when we migrate each one from Dev/Test/Prod we need to update the passwords. Unfortunately we are unable to use Solution Central. 

 

 

 

ConstantineAnswer
18-Opal
Mar 15, 2023 11:40 AM UTC

I guess you migrate your application between Dev/Test/Prod using some CI/CD pipeline? Then I'd suggest you integrate the latter with your Key Vault, and inject those credentials into ThingWorx through a service exposed via REST API.

 

View in thread

3 replies

VladimirN24-Ruby IV
24-Ruby IV
Mar 14, 2023 1:29 PM UTC

Can this help? From "Help Center" - "Step 7. Set Up Encryption for Azure IoT Hub Credentials": https://support.ptc.com/help/thingworx_scm_azure/r3.0/en/index.html#page/thingworx_scm_azure/azure_connector/c_azure_connector_set_up_encryption_for_azure_hub_credentials.html 

Translate
Constantine18-OpalAnswer
18-Opal
Mar 15, 2023 11:40 AM UTC

I guess you migrate your application between Dev/Test/Prod using some CI/CD pipeline? Then I'd suggest you integrate the latter with your Key Vault, and inject those credentials into ThingWorx through a service exposed via REST API.

 

Translate
    geva15-Moonstone
    15-Moonstone
    Mar 15, 2023 3:45 PM UTC

    Agreed with Constantine that this likely goes into your CI/CD pipeline.  Other options to consider depending on how you're running those environments is using using environment variables combined with Jinja configuration files (ie: container deployment) and you could them tie Kubernetes secret provider to the Key Vault.

    Translate
      Terms & ConditionsAccessibility statement