From 307d27ef770508ec569c59ee277ffbd58fea0be0 Mon Sep 17 00:00:00 2001 From: Scott Miller Date: Thu, 26 Oct 2023 10:07:14 -0500 Subject: [PATCH] Add a couple more places with entropy augmentation (#23854) --- website/content/docs/enterprise/entropy-augmentation.mdx | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/website/content/docs/enterprise/entropy-augmentation.mdx b/website/content/docs/enterprise/entropy-augmentation.mdx index 0d415c3fb0..8fac749271 100644 --- a/website/content/docs/enterprise/entropy-augmentation.mdx +++ b/website/content/docs/enterprise/entropy-augmentation.mdx @@ -36,7 +36,7 @@ number operations on critical security parameters (CSPs). These CSPs have been selected from our previous work in [evaluating Vault for conformance with FIPS 140-2 guidelines for key storage and key transport](https://www.datocms-assets.com/2885/1510600487-vault_compliance_letter_fips_140-2.pdf) -and include the following: +and include (but not limited to) the following: - Vault’s root key - Keyring encryption keys @@ -52,6 +52,9 @@ and include the following: - [SSH](/vault/docs/secrets/ssh) CA key generation, but not for key pair generation - [KMIP](/vault/docs/secrets/kmip) uses EA for its TLS CA, server, and client certificates. +- Passwords generated where password policies are supported. +- TOTP two factor keys. + ## Enabling/Disabling