Secured secrets by default
Introduction
Confluence Data Center provides default secrets encryption, featuring AES encryption with a 256-bit key to safeguard configuration data. This enhancement ensures that secret information is secured using strong encryption standards, bolstering overall system security.
Security Management
Confluence includes a suite of tooling for managing security configurations, including key management for your default secrets encryption.
See Security management for more information.
Secured Confluence secrets
By default, the following secrets are automatically secured.
System secrets (
confluence.cfg.xml)hibernate.connection.password(JDBC password)confluence.cluster.authentication.secret(Hazelcast shared secret)confluence.cluster.aws.access.key(AWS cluster join access key)confluence.cluster.aws.secret.key(AWS cluster join secret key)opensearch.password(OpenSearch password)synchrony.service.authtoken(Synchrony auth token)
Plugin secrets
Mail Archiving password
Mail Server password