---
title: "Vault"
slug: "go-endpoint-manager-windows-agent-vault"
updated: 2026-03-04T12:03:47Z
published: 2026-03-04T14:36:49Z
canonical: "docs.senhasegura.io/go-endpoint-manager-windows-agent-vault"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Vault

The application enables the caching, viewing, and copying of credentials. These actions are equivalent to using a proxy, preview, or copy through the web interface. SIEM will audit and relay all these actions.

When opening the application, you can find:

- In the top left corner is the search bar.
- In the top right corner is the Refresh button.
- Below the Search bar, you have the titles:
  - User: the default credential for privilege elevation actions inside and outside the Vault.
  - Domain: the name of the device's domain
  - Device: the device associated with the credential.

          Info

          

If the default credential doesn't have a registered domain, it will display the machine name instead.

## Use a credential

Users in Vault are always associated with the accounts they use to log into Windows.

          Attention

          

The workstation username must have an equivalent user in the Segura platform. If you are not sure about the username, read the article [Requirements](/v4-2/docs/epm-windows-requirements).

1. Access the user's desktop.
2. Start **Vault**.
3. Select the credential you want to use from the list of credentials.
4. Right-click on the automation.
5. Click **Copy** or **Show** to access the password.

## Use a credential in case of unavailability

In cases of unavailability of the Segura platform. The Vault stores the user and password credentials locally. It is encrypted and keeps the information from the last update. So the user can view and copy the credentials and password.

1. Access the Segura platform.
2. Go to **EPM > Management > Settings > Parameters > EPM**.
3. In modules, activate the option **Enable credentials?**.
4. Click on **Save**.
5. Access the user's workstation, and follow the steps to use a credential.

          Attention

          

This feature does not work in conjunction with offline mode.

## Configure Token requests to view or copy credential

1. Access the Segura platform.
2. Configure [**MFA OTP token**](/v4-2/docs/epm-windows-how-to-enable-mfa).
3. Go to **EPM > Settings > Parameters > Security**.
4. Check the option **Force Multi-Factor Authentication to view password?** or **Force Multi-Factor Authentication to login?** to **Yes**.
5. The user will be prompted to fill in a token to copy or view the credential.

## Configure verification of local privileged credentials

1. Access the Segura platform.
2. Access the menu **EPM > Settings > Parameters > EPM**.
3. Go to the **Report** section.
4. Check the option **Enable local privileged credentials checking?**.
5. Set days and times for execution.
6. Click **Save**.