Skip to content

EntiHub Documentation

IT Credential Ownership Metadata

IT / Security — Credential & Certificate Ownership Metadata

Store ownership, expiry, and rotation policy metadata only. Secrets stay in a vault; EntiHub drives accountability and expiry alerts.

Why this is needed

Expired certificates cause avoidable outages.
Nobody knows who rotates which credential.
Must not store secret material in MDM tables.

Proposed entities in EntiHub

Governance settings

Setting	Recommended value	Why
`approvalRequired`	`true`	Ownership changes for prod credentials are controlled.
`historyEnabled`	`true`	History of rotations/owners.
`allowSameAuthorApproval`	`false`	Maker/checker separation for sensitive changes.
`deletedRetentionDays`	`90` (or higher)	Soft-delete retention for auditability.

Entity definition (YAML sketch)

name: credential_meta
displayName: Credential metadata
domain: Security
description: Credential metadata
version: "1.0.0"
approvalRequired: true
historyEnabled: true
deletedRetentionDays: 90
displayRefColumn: meta_code
uniqueConstraints:
  - name: uq_credential_meta_meta_code
    columns: [meta_code]
columns:
  - name: meta_code
    dataType: string
    nullable: false
    maxLength: 64
  - name: asset_type
    dataType: string
    nullable: false
    maxLength: 32
  - name: system_name
    dataType: string
    nullable: false
    maxLength: 128
  - name: owner_team
    dataType: string
    nullable: false
    maxLength: 128
  - name: expires_on
    dataType: date
    nullable: false
  - name: rotation_policy
    dataType: string
    nullable: false
    maxLength: 128
  - name: status
    dataType: string
    nullable: false
    maxLength: 16

YAML sketches

Sketches highlight the important fields and governance flags. Trim or extend columns to match your domain. See Setup Entity for the full YAML reference.

Sample data

meta_code	asset_type	system_name	owner_team	expires_on	rotation_policy	status
CERT-WEB-01	certificate	www.example.com	Platform	2026-11-01	60-day renew	active
API-ERP-RO	api_client	ERP read-only	Integration	2027-01-15	annual	active

Benefits for the company

Fewer outages from expired certs.
Clear rotation owners.
No secrets in EntiHub—metadata only.