# Usage of Machine Credential (SSH-Password) from HashiCorp Vault in a Template?

**URL:** <https://forum.ansible.com/t/usage-of-machine-credential-ssh-password-from-hashicorp-vault-in-a-template/30303>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [May 10, 2019, 1:51pm UTC](https://forum.ansible.com/t/usage-of-machine-credential-ssh-password-from-hashicorp-vault-in-a-template/30303 "2019-05-10T13:51:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dan\_Steffen](https://avatars.discourse-cdn.com/v4/letter/d/94ad74/32.png) [@Dan\_Steffen](https://forum.ansible.com/u/Dan_Steffen)\
**Post date:** [May 10, 2019, 1:51pm UTC](https://forum.ansible.com/t/usage-of-machine-credential-ssh-password-from-hashicorp-vault-in-a-template/30303/1 "2019-05-10T13:51:10Z")

</div>

Hello,

I am not sure if this more a question of AWX or more a Question of HashiCorp Vault but is there a way to use Machine Credential (e.g. a SSH-Password) which are stored in HashiCorp Vault? I have seen there is a Credential Type: “HashiCorp Vault Secret Lookup” but I it’s not available in the Credential Dialog of the Template. I already found out that AWX supports HashiCorp Vault as Certification Center. Maybe this kind of credential has another goal or this is a coming feature but at least I would like to ask if someone here has feature information about it because the documentation seems for me very thin.  
best regards  
Dan

---

<div class="post-metadata">

**Author:** ![rpetrell](https://avatars.discourse-cdn.com/v4/letter/r/b4bc9f/32.png) [@rpetrell](https://forum.ansible.com/u/rpetrell)\
**Post date:** [May 10, 2019, 1:55pm UTC](https://forum.ansible.com/t/usage-of-machine-credential-ssh-password-from-hashicorp-vault-in-a-template/30303/2 "2019-05-10T13:55:21Z")

</div>

Hey Dan,

We recently added a new feature to AWX we call credential plugins. This feature makes it so that instead of typing in raw values for credential fields (like Machine SSH password), you can fetch a dynamic value from a third party source using some _other_ credential (like a HashiCorp Vault API token).

Take a look at this doc for more details:

[https://github.com/ansible/awx/blob/devel/docs/credential\_plugins.md](https://github.com/ansible/awx/blob/devel/docs/credential_plugins.md)

---

<div class="post-metadata">

**Author:** ![Dan\_Steffen](https://avatars.discourse-cdn.com/v4/letter/d/94ad74/32.png) [@Dan\_Steffen](https://forum.ansible.com/u/Dan_Steffen)\
**Post date:** [May 10, 2019, 2:03pm UTC](https://forum.ansible.com/t/usage-of-machine-credential-ssh-password-from-hashicorp-vault-in-a-template/30303/3 "2019-05-10T14:03:25Z")

</div>

Hello Ryan,

thanks for the quick and helpful response this looks exactly like what I am trying/looking for.  
Thanks you  
Dan