2020-11-11 15:36:23 +00:00
|
|
|
|
---
|
|
|
|
|
|
layout: docs
|
|
|
|
|
|
page_title: 1.6.0
|
|
|
|
|
|
sidebar_title: 1.6.0
|
|
|
|
|
|
description: |-
|
|
|
|
|
|
This page contains release notes for Vault 1.6.0.
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
|
|
# Vault 1.6.0
|
|
|
|
|
|
|
|
|
|
|
|
## Vault 1.6 Release Highlights
|
|
|
|
|
|
|
|
|
|
|
|
**Transform: Tokenization Tech Preview (Enterprise ADP Module Only)**: Vault 1.6 introduces a new transformation method
|
|
|
|
|
|
for tokenizing sensitive data stored in un-trusted/semi-trusted systems. Tokenization is available as part of the
|
2020-12-17 21:53:33 +00:00
|
|
|
|
“Advanced Data Protection” module in Vault Enterprise. Tokenization provides non-reversible data protection pursuant to
|
2020-11-11 15:36:23 +00:00
|
|
|
|
requirements for data irreversibility (PCI-DSS, GDPR, etc.). This feature is being released in a Tech Preview.
|
|
|
|
|
|
|
2020-12-17 21:53:33 +00:00
|
|
|
|
**Integrated Storage Enhancements**: Continuing with the enhancements made to Vault’s Integrated storage, we are adding
|
2020-11-11 15:36:23 +00:00
|
|
|
|
the following new features:
|
2020-12-17 21:53:33 +00:00
|
|
|
|
|
|
|
|
|
|
- **Cloud auto-join** provides support for Vault nodes to automatically discover and join a cluster via specified cloud
|
|
|
|
|
|
metadata. This is particularly useful when IP addresses are not static.
|
|
|
|
|
|
- **Automated snapshots** provides built-in Vault functionality for automated snapshots that takes snapshots of the
|
|
|
|
|
|
state of the Vault servers and saves them locally, or pushes them to an optional remote storage service.
|
2020-11-11 15:36:23 +00:00
|
|
|
|
|
|
|
|
|
|
**UI improvements**
|
2020-12-17 21:53:33 +00:00
|
|
|
|
|
|
|
|
|
|
- **New UI for Transform secrets engine (Enterprise ADP Module Only)**
|
|
|
|
|
|
- To configure FPE and Masking transformations, including custom alphabets and patterns for FPE.
|
|
|
|
|
|
- To create and manage roles and patterns for templated use in current and future FPE and masking transformations.
|
|
|
|
|
|
- **Improvements to Vault Usage UI** to show new metrics for “active clients”, “unique entities” and “active direct
|
|
|
|
|
|
tokens” that help with understanding Vault usage
|
2020-11-11 15:36:23 +00:00
|
|
|
|
|
|
|
|
|
|
**Support for seal migration** for all use cases to migrate from any to any unseal interface (including auto-unseal to auto-unseal of the same type)
|
|
|
|
|
|
|
|
|
|
|
|
**Key Management Secrets Engine in Tech Preview (Enterprise ADP Module Only)** - A new Key Management Secrets Engine to
|
|
|
|
|
|
help manage and securely distribute keys to various cloud KMS services. This feature is being released in Tech Preview
|
|
|
|
|
|
to be used in conjunction with Microsoft’s Azure Key Vault.
|
|
|
|
|
|
|
|
|
|
|
|
**Database secrets engine improvements**:
|
2020-12-17 21:53:33 +00:00
|
|
|
|
|
|
|
|
|
|
- Extending the newly released Password Policy to the combined Database Secrets Engine to support for all databases
|
|
|
|
|
|
- Add Couchbase support to the combined Database Secrets Engine to manage static and dynamic credentials for Couchbase
|
|
|
|
|
|
- Add static credential rotation to Cassandra, InfluxDB and Elasticsearch
|
|
|
|
|
|
- Add MongoDB Atlas root credential rotation
|
|
|
|
|
|
- Added support for root credential & static credential rotation for HanaDB
|
2020-11-11 15:36:23 +00:00
|
|
|
|
|
|
|
|
|
|
## What’s Changed
|
|
|
|
|
|
|
2020-12-17 21:53:33 +00:00
|
|
|
|
- Vault 1.6 will use Go 1.15, which has dropped support for 32-bit binaries for [Darwin](https://golang.org/doc/go1.15#darwin),
|
|
|
|
|
|
so we will no longer be issuing `darwin_386` builds of Vault.
|
2020-11-11 15:36:23 +00:00
|
|
|
|
|
|
|
|
|
|
For more detailed information, please refer to the [Changelog](https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#160).
|
