← Back to catalog OpenBao · managed by DINAO

Your sovereign secret vault

A secret manager powered by OpenBao (open source fork of Vault under the Linux Foundation), installed and maintained by DINAO. Centralize secrets, keys, and certificates — hosted in France.

Hosted in FranceOpen source MPL 2.0Dynamic secrets & PKIGDPR CompliantOfficial publisher image
Overview

What is OpenBao?

OpenBao is an open source and community-driven secret manager, a Vault fork governed by the Linux Foundation. It was created from the last version of Vault under the MPL 2.0 license, before the license change, to preserve Vault's experience, security model, and features under a truly free license.

OpenBao manages static secrets (provided and securely stored) as well as dynamic secrets generated on demand to integrate with databases or cloud provider identities, then automatically revoked upon lease expiration. It offers PKI (SSH or X.509 certificate creation), encryption-as-a-service with centralized key management, and resolves identity fragmentation through a unified ACL system.

Compatible with the Vault API, it facilitates the migration of existing integrations. Deployed in a dedicated container, monitored, backed up, and updated by DINAO — with optional high-availability configuration.

Compatible offers

Host OpenBao at DINAO

Resource tiers compatible with OpenBao prerequisites (minimum 1 vCPU / 512 Mo / 1 Go). Hosted in France, fully managed.

Découverte
1 vCPU · 2 Go · 20 Go
9,90 € /month excl. VAT
  • 1 dedicated vCPU
  • 2 Go RAM
  • 20 GB NVMe
  • Daily backups
  • Managed & monitored by DINAO
Order
Performance
4 vCPU · 8 Go · 80 Go
39,90 € /month excl. VAT
  • 4 dedicated vCPU
  • 8 Go RAM
  • 80 GB NVMe
  • Daily backups
  • Managed & monitored by DINAO
Order
Dédié
8 vCPU · 16 Go · 160 Go
79,90 € /month excl. VAT
  • 8 dedicated vCPU
  • 16 Go RAM
  • 160 GB NVMe
  • Daily backups
  • Managed & monitored by DINAO
Order
Under the hood

Technical details

vCPU
1 vCPU
ideal : 2 vCPU
Memory
512 Mo
ideal : 2 Go
Disk
1 Go
ideal : 10 Go
Image : ghcr.io/openbao/openbao Registry : ghcr.io Services : openbao Ports : 8200/tcp (API HTTP/HTTPS et interface web)
FAQ

You might be wondering…

What is the difference with HashiCorp Vault?

OpenBao is an open source fork of Vault, created from the last version under the MPL 2.0 license before Vault switched to a non-free license. It is governed by the Linux Foundation and remains compatible with the Vault API.

Can I generate credentials on demand?

Yes. OpenBao manages dynamic secrets: it creates credentials on the fly for your databases or clouds, with a limited-time lease, then automatically revokes them upon expiration.

Does it manage certificates?

Yes. OpenBao acts as a PKI authority (issuing X.509 and SSH certificates) and offers encryption-as-a-service to encrypt your data without directly handling keys.

Where are the secrets hosted?

On DINAO infrastructure in France, in one of the available datacenters. Your secrets are encrypted at rest and do not leave the country.

Can I migrate from Vault?

Yes. OpenBao maintains compatibility with the Vault API, greatly facilitating the migration of your existing integrations. DINAO supports you in the setup.