> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Ansible Vault

> Conceptual overview of Ansible Vault integration with CryptoHub, explaining features and value proposition.

This document provides information on integrating Ansible Vault with CryptoHub through the Futurex PKCS #11 library.

## About Ansible Vault

Ansible is an open-source IT automation tool developed by Red Hat. It automates various IT tasks, such as configuration management, application deployment, orchestration, and task automation.

Ansible Vault is a feature of Ansible that enables you to encrypt sensitive data, such as passwords or keys, in encrypted files instead of plaintext.

## Ansible Vault key features

* **Encrypt entire files** (YAML, vars, inventories)
* **Encrypt individual variables** using encrypt\_string
* **Support for multiple vault IDs/keys** (e.g., dev vs prod)
* **Secure file operations**: edit, view, rekey
* **CLI automation support** (--vault-password-file)
* **Avoids leaving decrypted data on disk** (when used carefully)
* **AES256 encryption** by default
* **Fully integrated with Ansible playbooks/workflows**

## What is CryptoHub?

CryptoHub is the most flexible and versatile cryptographic platform in the industry. It combines every cryptographic function within our extensive solution suite. You can operate CryptoHub within a simple web dashboard to deploy virtual cryptographic modules, fulfilling most use cases.

## Using CryptoHub to protect Ansible private keys

Ansible Vault works with private keys stored in hardware security modules (HSMs), which helps to prevent the disclosure of the keys and enables the secure usage of private keys to perform various functions.

With this integration, you can securely reference your private key stored in CryptoHub to perform automated encryption and decryption tasks with Ansible Playbooks with the Futurex PKCS #11 library, pkcs11-provider by Latchset,  and OpenSSL.