Best secure certificate storage solution for on-premise or co-location hosting?

[JerryMungo]

.

 

[Sinbad]

Hashicorp vault

 

[WAslayer]

Hashicorp vault

Came here to say this..

 

[SauRoNZA]

Hashicorp Vault or AWS Secrets Manager.

 

[RonSwanson]

What do you use for secure certificate storage in your own solutions?
I'm trying to find a decent solution that isn't going to be an admin nightmare for the client. They use co-location hosting at their ISP.
Thanks in advance!

Ansible and Hashicorp vault are OK for most creds, but a HSM may be required, it depends on the value of the asset that you are ultimately trying to protect.

 

[Messugga]

Hashicorp Vault or AWS Secrets Manager.

+1.

Azure also has Key Vault which is similar to AWS. Seems to be solid enough.

 

[Lord Flacko]

+1.

Azure also has Key Vault which is similar to AWS. Seems to be solid enough.

Azure Key Vault also supports RBAC.