SecurityInsight settings · Settings > Sign-in & Azure resources
Key Vault name
| Key | SI_KeyVaultName |
|---|---|
| Where | Settings > Sign-in & Azure resources > How SecurityInsight signs in |
| Type | Text |
| Default | Falls back to SpnKeyVaultName; with neither set, secret reads stop with an error |
| Edition | Community |
What it does
The one Key Vault SecurityInsight reads its secrets from: the sign-in secret, integration credentials and a Pro licence.
When set
All secrets are read from the named vault. A wrong name means sign-in secrets, keys and the licence cannot be read and runs fail or run as Community.
When blank or default
Left blank, the default applies: Falls back to SpnKeyVaultName; with neither set, secret reads stop with an error
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Setup writes it. Change only if you move secrets to another Key Vault.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack