# How are my user entered config values secured at rest?

**URL:** <https://community.replicated.com/t/how-are-my-user-entered-config-values-secured-at-rest/508>\
**Category:** How does it work?\
**Created:** [March 16, 2021, 11:39pm UTC](https://community.replicated.com/t/how-are-my-user-entered-config-values-secured-at-rest/508 "2021-03-16T23:39:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![todd](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.replicated.com/todd/32/318_2.png) [@todd](https://community.replicated.com/u/todd)\
**Post date:** [March 16, 2021, 11:39pm UTC](https://community.replicated.com/t/how-are-my-user-entered-config-values-secured-at-rest/508/1 "2021-03-16T23:39:15Z")

</div>

I am concerned about sensitive configuration values such as TLS certs, or service tokens on the filesystem at rest. How are these secured?

---

<div class="post-metadata">

**Author:** ![todd](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.replicated.com/todd/32/318_2.png) [@todd](https://community.replicated.com/u/todd)\
**Post date:** [March 16, 2021, 11:40pm UTC](https://community.replicated.com/t/how-are-my-user-entered-config-values-secured-at-rest/508/2 "2021-03-16T23:40:56Z")

</div>

These config values are encrypted with a unique key per install.