> This page is for Itential Platform On-Prem, version 2023.2.
> For other versions, use one of these documentation indexes:
> - 6 (default): https://docs-test.itntl.com/itential-platform/6/llms.txt
> - 2023.2: https://docs-test.itntl.com/itential-platform/2023-2/llms.txt

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs-test.itntl.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs-test.itntl.com/_mcp/server.

# Manually encrypt properties

> Use the $SECRET syntax to encrypt specific properties with Vault

This page explains how to use the `$SECRET` syntax to store specific property values in Vault instead of in Platform.

## Reference syntax

To reference a secret, replace the property value with a Vault reference in the following format:

```
"$SECRET_<path> $KEY_<key>"
```

For example, `"$SECRET_default_password $KEY_key"` evaluates to `"password"`.

> **Info**
>
> Include a space before `$KEY_`.

## Encrypt adapter properties

### Create a secret in Vault

In Vault, create a `path` and `key name` for the property. Use a path and key name that clearly relate to the property.

### Open the adapter configuration

Go to **Admin Essentials**, click **Adapters**, and select an adapter.

### Turn on Advanced View

Click the **Advanced View** toggle to view the JSON configuration, which can be easier to edit.

### Replace the value with a reference

Remove the existing value and replace it with the Vault reference. For the format, see [Reference syntax](#reference-syntax).

### Save the configuration

Click **Save**. The adapter restarts automatically and uses Vault to decrypt the property.

### Verify the connection

Confirm that the adapter appears in the list with a green status indicator and connection icons.

## Encrypt integration properties

### Create a secret in Vault

In Vault, create a `path` and `key name` for the property. Use a path and key name that clearly relate to the property.

### Open the integration configuration

Go to **Admin Essentials**, click **Integrations**, and select an integration.

### Locate the property

Find the value that you want to encrypt.

### Turn on Advanced View

Click the **Advanced View** toggle to view the JSON configuration.

### Replace the value with a reference

Remove the existing value and replace it with the Vault reference. For the format, see [Reference syntax](#reference-syntax).

### Save the configuration

Click **Save**. The integration restarts automatically and uses Vault to decrypt the property.

## Encrypt profile properties

### Create a secret in Vault

In Vault, create a `path` and `key name` for the property. Use a path and key name that clearly relate to the property.

### Open the profile configuration

Go to **Admin Essentials**, click **Profiles**, and select the running profile.

### Select the property

Click the **Configure** tab and select the profile property that you want to encrypt.

### Replace the value with a reference

Remove the existing value and replace it with the Vault reference. For the format, see [Reference syntax](#reference-syntax).

### Save the configuration

Click **Save**.

### Restart Platform

Restart Platform to apply the changes.

## Encrypt properties.json values

### Create a secret in Vault

In Vault, create a `path` and `key name` for the property. Use a path and key name that clearly relate to the property.

### Open properties.json

Open the **properties.json** file and select the property that you want to encrypt, for example `"mongoProps.credentials.passwd"`.

> **Info**
>
> You can't encrypt `vaultProps` values in **properties.json**.

### Replace the value with a reference

Remove the existing value and replace it with the Vault reference. For the format, see [Reference syntax](#reference-syntax).

### Save the file

Save **properties.json**.

### Restart Platform

Restart Platform to apply the changes.

## What's next

#### [Automatic encryption](/itential-platform/secrets/hashicorp/automatically-encrypt-properties)

#### [Create secrets](./create-secrets)