Summary

Tenable is proud to announce the addition of SSH Certificate authentication to our HashiCorp Vault integration. This feature allows customers to leverage HashiCorp Vault’s SSH Secrets Engine to retrieve signed SSH certificates during credentialed scanning for use in SSH authentication to target systems. Hence providing a more secure and streamlined approach to privileged access management. This update is now available in Tenable Vulnerability Management and Tenable Nessus, with plans to release for Tenable Security Center at a later date.

By using the HashiCorp Vault with the SSH Signed Certificates option, users can centralize the management of their SSH secrets while reducing sprawling. Documentation for the Hashicicorp integration will be available on our documentation page.

Supported Credential Types

The HashiCorp Vault integration supports:

• SSH, including (least privilege, privilege escalation, SSH key authentication and SSH Signed Certificates).
• SMB (Windows), including domain configuration.
• SNMPv3
• Database integration, including the following database types:
  • Oracle
  • SQL Server
  • MySQL
  • MongoDB
  • PostgreSQL
  • DB2
  • Cassandra
  • Sybase ASE
• VMware vCenter API
• VMware ESX SOAP API
• Nutanix Prism Central

Impact

There is no impact to existing scan configurations..

Release Date

Immediate; July, 6th 2026 for T.VM and Nessus, TDB for T.SC