Quick start guide

The aim of this quick-start user guide is to present the main actions that users can perform with Enterprise Vault.

Onboarding

The administrators are in charge of creating user accounts first.
Two scenarios are possible:

If user accounts are imported, users will use their usual login and so the administrators will only provide access information (Vault URL).
If user accounts have been specifically created for Enterprise Vault, users will receive an email with a link to create a password.

Then, if the admins have enabled multi-factor authentication, users will have to perform enrolment on first authentication.

Finally, when accessing Enterprise Vault for the first time, users must define a master password, which will be required for each new data decryption.

Access

To access their vault, users must perform 2 actions:

Authenticate themselves on WALLIX ONE IDaaS using their login, password and optionally 2nd factor.
Provide the master password needed to decrypt their data.

Clients

These actions, followed by access to the data, can be carried out on 3 types of client:

The browser, via a specific URL
Browser plugins (Chrome, Firefox, Edge via the Chrome plugin)
Mobile applications

Type of vaults

Users have access to two types of vault:

Their personal vault, to which only them have access*.
Shared vaults, enabling secrets to be shared between different people and teams.

*Enterprise Vault has a recovery mode which, if activated, can give administrators access to personal secrets.

Possible actions

Users can perform the following actions on their personal vault:

Create login, credit card, identity or note secrets
Add attachments to secrets
Organize their personal vault with folders
Generate secure links to share text or files
Generate passwords and identifiers
Import or export secrets
Generate security reports on their secrets
Configure account settings
- Clean the content
- Change master password
- Set encryption keys
- Set language and theme preferences

Users can perform the following actions* on the shared vaults:

Create a shared vault
Create login, credit card, identity or note secrets
Add attachments to secrets
Organize shared vault with collections
Define members and their roles
Generate security reports for shared vault secrets
Import or export data in the shared vault
Set shared vault parameters
- Rename the shared vault
- Define default behavior
- Clean shared vault

*Obviously, depending on the user's role in the shared vault, some of these actions will not be possible for users

Finally, some actions are specific to the browser plugins.
In fact, they enable more advanced integration with the browser, including: