All WSO2 Carbon products contain some configuration files with sensitive information such as passwords. This documentation explains how such plain text passwords in configuration files can be secured using the Secure Vault implementation that is built into Carbon products.
Note that the Cipher Tool, which is necessary for Secure Vault will be available for download from the WSO2 Git repository soon.
See the following topics: