Credentials
The kinds of credential sets, where they are used and how they are protected.
A credential set is saved once under Inventory > Credentials and then chosen on devices or groups. After saving, secrets are never shown again.
Kinds
| Kind | Used for |
|---|---|
| SSH login | Backups, pushes, restores, the terminal, data over SSH, firmware upgrades |
| SNMP v2c community | Status, model, serial, OS version, neighbours, health, storage |
| SNMP v3 user | The same, with authentication and encryption |
| FortiGate API token | Listing and installing FortiGate firmware |
| Aruba Instant On cloud | Reading sites, access points and switches from the Instant On portal |
| Backup destination | S3, Google Drive, OneDrive, SFTP, FTP/FTPS or TFTP for off-box copies of config versions |
Which credential a device uses
A device uses its own credential if one is chosen. Otherwise it uses the credential of its innermost group that has one. The device page shows which credential is in effect and where it comes from.
How they are protected
Credentials are encrypted on the node with a key kept in /data/secret.key (or the key you set in RETIVO_SECRET_KEY). The key never leaves the node. A copy of the database without the key cannot decrypt them.
Caution
SSH logins use a username and password; SSH keys are not supported yet. A device's host key is accepted the first time Retivo connects.
What's next
Last modified October 15, 2026