Use the route that matches your task. These Next docs describe unreleased
behavior on main. Select the published release line when installing release
artifacts.
Get started
Choose a deployment model, prepare OpenBao, install the provider, and enable encryption.
ConfigureSet up OpenBao authentication and policy variants, and monitor the provider.
OperateRotate keys, upgrade, recover from disasters, and troubleshoot a running provider.
SecurityReview the threat model, hardening, authentication, host identity, and decrypt validation.
ReferenceCheck the CLI, configuration, KMS v2 contract, metrics, compatibility, and release policy.
ArchitectureUnderstand the key model, rotation model, failure modes, and design rationale.