Table of Contents

1. Challenge

   Unseal the Vault and Login with the Root Token

   1. In the Vault Server, retrieve the vault keys.
   2. Unseal the vault.
   3. Log in with the Initial Root Token.
2. Challenge

   Enable Kv Secrets Engine and Create a Token with a Policy That Allows Access to It

   1. Enable kv secrets engine.
   2. Start python3.6.
   3. In the Python Interactive Console, create a hash.
   4. Copy the hash.
   5. Write a key-value secret using the email and hash.
   6. Create a policy file named web-policy.hcl, and give it read permissions.
   7. Write the policy.
   8. Create a token with the new policy.
   9. Copy the client_token
   10. Test out the token.
3. Challenge

   Install `pip for python3`, the `Django` framework, and Allow the Web Server to Access the App

   1. Clone the Git repository.
   2. Install python3-pip.
   3. Using pip3, install the Django framework.
   4. Open the settings.py file.
   5. Add the Web Server public IP address to the ALLOWED_HOSTS.
   6. Save the file.
   7. Open the views.py file.
   8. In the get_hashed_vault_creds() function, change the url and hdr.
   9. Save the file.
   10. Change to the HashiCorp-Vault/ directory.
   11. Run the django app.
   12. Open a web browser, go to 0.0.0.0:8080, and test the login.