# Credential Stores

> A credential store is a named location within a secure store, such as CyberArk, from which you can store and retrieve sensitive data such as robot credentials and credential assets when needed. Orchestrator supports the use of multiple credential stores at tenant level, and provides built-in support for [Azure Key Vault](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#azure-key-vault-integration),, [HashiCorp Vault](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#hashicorp-vault-integration), [Thycotic Secret Server](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#thycotic-secret-server-integration), [BeyondTrust](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#beyondtrust-integration), [AWS Secrets Manager](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#aws-secrets-manager-integration), and [CyberArk](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#cyberark%C2%AE-integration). It also provides the necessary architecture to add and manage third party secure stores, if desired.

A credential store is a named location within a secure store, such as CyberArk, from which you can store and retrieve sensitive data such as robot credentials and credential assets when needed. Orchestrator supports the use of multiple credential stores at tenant level, and provides built-in support for [Azure Key Vault](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#azure-key-vault-integration),, [HashiCorp Vault](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#hashicorp-vault-integration), [Thycotic Secret Server](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#thycotic-secret-server-integration), [BeyondTrust](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#beyondtrust-integration), [AWS Secrets Manager](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#aws-secrets-manager-integration), and [CyberArk](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/integrating-credential-stores#cyberark%C2%AE-integration). It also provides the necessary architecture to add and manage third party secure stores, if desired.

:::note
The credential stores feature must be enabled for your tenant by the Orchestrator administrator. See [here](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/uipath-orchestrator-dll-config#pluginssecurestores) for details.
:::

## Credential store plugins

Beyond the secure stores with built-in support, Orchestrator architecture supports the functionality of loading third-party or developing custom plugins, enabling you to use any desired credential store.

### Loading third-party plugins

1. Navigate to the `\Orchestrator\Plugins` folder in your Orchestrator installation directory.
2. Save the `.dll` files of your plugin in this folder.
3. Update the `UiPath.Orchestrator.dll.config` file with the plugin mentioned in the [UiPath.Orchestrator.dll.config](https://docs.uipath.com/orchestrator/standalone/2024.10/installation-guide/uipath-orchestrator-dll-config#pluginssecurestores) guide.
4. Restart your Orchestrator instance and check the logs to confirm the plugin was loaded successfully.
5. Your new credential store should now be available when configuring credential stores.

### Developing plugins

Development documentation for creating your own secure store plugins is available in the [UiPath® repository](https://github.com/UiPath/Orchestrator-CredentialStorePlugins).

Also available there are three samples to assist in your development:

* **RandomPass** - a read-only store that will generate a random password;
* **SQLPass** - a read/write store using an external SQL database other than the Orchestrator database;
* **Key Vault** - the fully functional [Key Vault plugin](https://docs.uipath.com/orchestrator/standalone/2024.10/user-guide/managing-credential-stores#managing-credential-stores) available with your Orchestrator instance.