Configure a file connector to use a password vault

Use this task to set up an FTP, FTPS, or SFTP file connector to fetch its login credentials from a password vault instead of storing them in DCT.

Before you start, create the vault and credential path the connector will use. See Create a password vault and Create a credential path.

credential_path_id and password are mutually exclusive. For SFTP, credential_path_id and ssh_key are also mutually exclusive. A connector uses one authentication method at a time.

Steps

  1. Go to Compliance > Connectors and create a new file connector or open an existing one to view its details and configure its vault settings. For more information on creating a file connector, see Create a file connector.

  2. Set Connection Method to FTP, FTPS, or SFTP.

  3. Enter the server name, port, file path, and any other required connection details.

  4. In the Credential Path dropdown, select the credential path that holds the file server credentials.

  5. Click Test Connection. A successful result confirms that DCT Compliance connected to the vault, retrieved the credentials, and reached the file server.

  6. Save the connector.

How credentials are resolved at job execution

When a compliance job runs, DCT sends the credential path and its parent vault to the compliance node as execution dependencies. The node fetches the credentials from the vault directly at runtime. If the vault is unreachable at execution time, the job fails with a connectivity error.