The MySQL Keyring ...  content of company certificate  ... -----END CERTIFICATE----- The following instructions describe how to create a HashiCorp Vault setup that facilitates testing the keyring_hashicorp  plugin. A test setup is similar to a production setup, but production use of HashiCorp Vault entails additional security considerations such as use of non-self-signed certificates and storing the company certificate in the system trust store. You must implement whatever additional security steps are needed to satisfy your operational requirements. These instructions assume availability of the certificate and key files created in Certificate and Key Preparation. See that section if you do not have those files. Download the HashiCorp Vault binary appropriate for your platform from https://www.vaultproject.io/ downloads.html. Extract the content of the archive to produce the executable  vault  command, which is used to perform HashiCorp Vault operations. If necessary, add the directory where you install the command to the system path. (Optional) HashiCorp Vault supports autocomplete options that make it easier to use. For more information, see https://learn.hashicorp.com/vault/getting-started/install#command-completion. Prepare a configuration file named  config.hcl  with the following content. For the  tls_cert_file , tls_key_file , and  path  values, substitute path names appropriate for your system. To start the Vault server, use the following command, where the  -config  option specifies the path to the configuration file just created: vault server -config=config.hcl During this step, you may be prompted for a password for the Vault server private key stored in the vault.key  file. The server should start, displaying some information on the console (IP, port, and so forth). 1422 3. Start the HashiCorp Vault server. 2. Create the HashiCorp Vault server configuration file. 1. Fetch the HashiCorp Vault binary. HashiCorp Vault Setup Important listener "tcp" { address="127.0.0.1:8200" tls_cert_file="/home/username/certificates/vault.crt" tls_key_file="/home/username/certificates/vault.key" } storage "file" { path = "/home/username/vaultstorage/storage" } ui = true