# Update Key Vault

Users can upgrade their key vault from Spydra's default Hashicorp Vault to managed services like Azure Key Vault or AWS Key Manager for securely storing node credentials, certificates, and keys.

However, user's will not be able to switch back to Spydra's default Hashicorp vault once your key vault is updated.

To connect your managed vault service, follow these steps:

1. Navigate to the `Organisations` tab on the network details page.
2. Click on an organisation to view its network-org details.
3. Select the `Update vault` option.
4. Choose to connect to either your managed Azure Key Vault or AWS Key Manager.
5. Click on "Update key Vault' option.

<figure><img src="/files/1VNOmJ10JHJT49HdnqOJ" alt=""><figcaption></figcaption></figure>

#### <mark style="color:blue;">To connect Azure Key Vault:</mark>

* Choose Azure Key Vault as your 'External Vault Source'.

When selecting the source, if you've previously connected an Azure Key Vault, it will appear as an option. Otherwise, you'll need to connect a new Azure Key Vault

To proceed and connect your Azure Key Vault, ensure the vault details are correct:

1. **Vault Name**: Use a descriptive name for easy identification. Example- Blockchain Azure keys.
2. **Application ID**
3. **Tenant ID**
4. **Application Secret**
5. **Key Vault URL**

{% hint style="success" %}
Find details in your Azure Key Vault account by referring to [Azure's documentation](https://learn.microsoft.com/en-us/azure/key-vault/secrets/quick-create-net?tabs=azure-cli#setup).
{% endhint %}

#### <mark style="color:blue;">To connect AWS Key Manager:</mark>

* Choose AWS Key Manager as your 'External Vault Source'.

When selecting the source, if you've previously connected an AWS Key Manager, it will appear as an option. Otherwise, you'll need to connect a new AWS Key Manager

To proceed and connect your AWS Key Manager, ensure the vault details are correct:

1. **Vault Name**: Use a descriptive name for easy identification. Example- Blockchain Azure keys.
2. **Vault Name**: Use a descriptive name for easy identification. Example- Blockchain Azure keys.
3. **AWS Access Key**
4. **AWS secret key**
5. **Region**

{% hint style="success" %}
Find details in your AWS Key Manager account by referring to [AWS Key Manager's documentation.](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_resource-policies.html)
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.spydra.app/how-to/private-network/networks/view-and-edit-network-details/update-key-vault.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.