# RE: Re: Re: Chef Vault without knife

**URL:** <https://discourse.chef.io/t/re-re-re-chef-vault-without-knife/6725>\
**Category:** Chef Infra (archive)\
**Created:** [June 5, 2015, 8:27pm UTC](https://discourse.chef.io/t/re-re-re-chef-vault-without-knife/6725 "2015-06-05T20:27:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kkeane](https://avatars.discourse-cdn.com/v4/letter/k/9fc29f/32.png) [@kkeane](https://discourse.chef.io/u/kkeane)\
**Post date:** [June 5, 2015, 8:27pm UTC](https://discourse.chef.io/t/re-re-re-chef-vault-without-knife/6725/1 "2015-06-05T20:27:05Z")

</div>

Do it the other way round: generate the key on the EC2 instance, and then export the public key. It is safe to put the public key unencrypted into attributes, or use any other mechanism you like.

Kevin Keane

The NetTech

[http://www.4nettech.com](http://www.4nettech.com)

Our values: Privacy, Liberty, Justice

See [https://www.4nettech.com/corp/the-nettech-values.html](https://www.4nettech.com/corp/the-nettech-values.html)

-----Original message-----  
From: Douglas Garstang [doug.garstang@gmail.com](mailto:doug.garstang@gmail.com)  
Sent: Friday 5th June 2015 12:47  
To: [chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
Subject: [chef] Re: Re: Chef Vault without knife.

I’m trying to find a generic, scalable way, to install an SSL private key onto an EC2 instance.

Doug.

On Fri, Jun 5, 2015 at 12:20 PM, Tensibai Zhaoying \<[tensibai@iabis.net](mailto:tensibai@iabis.net) [mailto:tensibai@iabis.net](mailto:tensibai@iabis.net) \> wrote:

Is it possible to have a more detailed explanation on what your problem is ?

As is I can’t tell what you try to do…

Le 5 juin 2015 19:31, Douglas Garstang \<[doug.garstang@gmail.com](mailto:doug.garstang@gmail.com) [mailto:doug.garstang@gmail.com](mailto:doug.garstang@gmail.com) \> a écrit :  
Is it possible to use chef-vault without having to use the knife command? My systems come up, and run the chef-client automaticaly.

Thanks,  
Doug

–  
Regards,

Douglas Garstang  
[http://www.linkedin.com/in/garstang](http://www.linkedin.com/in/garstang) [http://www.linkedin.com/in/garstang](http://www.linkedin.com/in/garstang)  
Email: [doug.garstang@gmail.com](mailto:doug.garstang@gmail.com) [mailto:doug.garstang@gmail.com](mailto:doug.garstang@gmail.com)  
Cell: +1-805-340-5627

---

<div class="post-metadata">

**Author:** ![Yoshi\_Spendiff](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/yoshi_spendiff/32/13_2.png) [@Yoshi\_Spendiff](https://discourse.chef.io/u/Yoshi_Spendiff)\
**Post date:** [June 5, 2015, 8:56pm UTC](https://discourse.chef.io/t/re-re-re-chef-vault-without-knife/6725/2 "2015-06-05T20:56:50Z")

</div>

Have a look at the certificate cookbook

On Fri, Jun 5, 2015 at 1:27 PM, Kevin Keane Subscription \<  
[subscription@kkeane.com](mailto:subscription@kkeane.com)\> wrote:

> Do it the other way round: generate the key on the EC2 instance, and  
> then export the public key. It is safe to put the public key unencrypted  
> into attributes, or use any other mechanism you like.
> 
> Kevin Keane
> 
> The NetTech
> 
> [http://www.4nettech.com](http://www.4nettech.com)
> 
> Our values: Privacy, Liberty, Justice
> 
> See [https://www.4nettech.com/corp/the-nettech-values.html](https://www.4nettech.com/corp/the-nettech-values.html)
> 
> -----Original message-----  
> _From:_ Douglas Garstang [doug.garstang@gmail.com](mailto:doug.garstang@gmail.com)  
> _Sent:_ Friday 5th June 2015 12:47  
> _To:_ [chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
> _Subject:_ [chef] Re: Re: Chef Vault without knife.
> 
> I'm trying to find a generic, scalable way, to install an SSL private key  
> onto an EC2 instance.
> 
> Doug.
> 
> On Fri, Jun 5, 2015 at 12:20 PM, Tensibai Zhaoying [tensibai@iabis.net](mailto:tensibai@iabis.net)  
> wrote:
> 
> > Is it possible to have a more detailed explanation on what your problem  
> > is ?
> > 
> > As is I can't tell what you try to do...  
> > Le 5 juin 2015 19:31, Douglas Garstang [doug.garstang@gmail.com](mailto:doug.garstang@gmail.com) a  
> > écrit :
> > 
> > Is it possible to use chef-vault without having to use the knife command?  
> > My systems come up, and run the chef-client automaticaly.
> > 
> > Thanks,  
> > Doug
> 
> --  
> Regards,
> 
> Douglas Garstang  
> [http://www.linkedin.com/in/garstang](http://www.linkedin.com/in/garstang)  
> Email: [doug.garstang@gmail.com](mailto:doug.garstang@gmail.com)  
> Cell: +1-805-340-5627

--  
Yoshi Spendiff  
Ops Engineer  
Indochino  
Mobile: +1 778 952 2025  
Email: [yoshi.spendiff@indochino.com](mailto:yoshi.spendiff@indochino.com)