SecurityInsight settings · Settings > Advanced / diagnostics
Key Vault name (older name)
| Key | SpnKeyVaultName |
|---|---|
| Where | Settings > Advanced / diagnostics |
| Type | Text |
| Default | Not set: SI_KeyVaultName is used; no vault means no vault reads |
| Edition | Community |
What it does
Name of the Azure Key Vault holding the service principal secret and other credentials; older name accepted alongside SI_KeyVaultName.
When set
With a secret name, the launchers read the client secret from this vault using the host's managed identity. SI_KeyVaultName wins when both are set.
When blank or default
Left blank, the default applies: Not set: SI_KeyVaultName is used; no vault means no vault reads
Risk and how to reverse it
A tuning or diagnostic setting: it mostly changes run time, cost or log detail. Leave it at the default unless support asks. Reversible at once.
Requires
Read by: asset-tagging, asset-trend, azure, endpoint, identity, privilege-tier-classifier, publicip, risk-analysis.
Recommended
Keep the default. Change it when: Rarely; set SI_KeyVaultName instead on new installs.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack