Downloads for the Secret Server SDK for DevOps

Overview

The Secret Server SDK replaces and improves upon the existing functionality of the .NET/Application API. Users can leverage this SDK to tokenize credentials in scripts and configuration files for .NET web applications. The SDK can also call for a REST Webservices authentication token for added functionality. Finally, the SDK has a local encrypted cache for every location it is installed on to allow for quicker transit times and resiliency in case communication with Secret Server is lost.

To download the SDK command line tool, choose a version and OS platform below. See the Using the Secret Server SDK for DevOps topic for how to use the SDK.

Due to Java’s security flaws and the existence of the Secret Server SDK, we will no longer support the Secret Server Java API. If you use the Secret Server Java API, please consider transitioning to the Secret Server SDK.

SDK Client version 1.5.9

Release Notes

Improved error handling after an Invalid Client error occurs.

Downloads

Download File Hashes

Windows x64

File: secretserver-sdk-1.5.9-win-x64.zip
SHA256: 79C9EF7BA47CB2BACC5902545F10BF79D777D28C56538BB68D7B2074F395B8DF

MacOS x64

File: secretserver-sdk-1.5.9-osx-x64.zip
SHA256: C27D14073006649B229FFDDDD78A5E86218E9CF17CD8B24F326ABFB9F93185CF

Linux x64

File: secretserver-sdk-1.5.9-linux-x64.zip
SHA256: C257AF98D1792AF9CF208EDA5BEDA5C6DA38CAE396552F92DF5E4DA4D80EAA36

Red Hat Enterprise Linux 6 x64

File: secretserver-sdk-1.5.9-rhel.6-x64.zip
SHA256: 8255E2B0A9ED894C4056D82D0507002D41583B502835782578461409F4ED6A36

Legacy Releases

SDK Client version 1.5.7

Release Notes

Added capability to enter a comment when accessing a Secret.

Downloads

Download File Hashes

Windows x64

File: secretserver-sdk-1.5.7-win-x64.zip
SHA256: A932CD4B0CC343AEC83BEF43396F6D5B9F973510963ECC4B22426D5878E84E4C

MacOS x64

File: secretserver-sdk-1.5.7-osx-x64.zip
SHA256: BCBDA0F0AF86D55DC7EBBCD8BF2B67049D24D58D0AFA2A17EABF0972AFA55A4

Linux x64

File: secretserver-sdk-1.5.7-linux-x64.zip
SHA256: C5EE5A15CABA1C23C44C65DC4225C282A4D927ECAF0E9E1AEE1BC1ABE7D8BE4E

Red Hat Enterprise Linux 6 x64

File: secretserver-sdk-1.5.7-rhel.6-x64.zip
SHA256: C3317EEE032EBCF80566A0F66A74A6591EC3689B260B03E55B34B3CDC7DA0E0B

SDK Client version 1.5.5

Release Notes

Reset the token expiration calculation to use UTC time to avoid unexpected expiration.
Reworked error handling for secret field-value requests so that the correct error string is extracted from the result if the secret is not accessible.
Fixed the issue that caused the "tss version" command to return an inaccurate value.
Updated references to external libraries within the SDK to address reported vulnerabilities.

Downloads

Download File Hashes

Windows x64

File: secretserver-sdk-1.5.5-win-x64.zip
SHA256: FBE984292F5F228630B62E72E2F26A5D66B1C53964BC0707E718D8937DC538DD

MacOS x64

File: secretserver-sdk-1.5.5-osx-x64.zip
SHA256: A9A7DEEC905D3C21C95BB2A8467FE93640F491E7643760622C5F33B1B5C717C0

Linux x64

File: secretserver-sdk-1.5.5-linux-x64.zip
SHA256: 4C2C293D9F3F3BE08722FEAF10BD1506D67F2258DD8DAF51FC66D7D13A58AF0E

Red Hat Enterprise Linux 6 x64

File: secretserver-sdk-1.5.5-rhel.6-x64.zip
SHA256: C8B140D0F746D48EF1938D2836B5C69D1E9A5FAD3817BAF11FF48011F8E2299C

SDK Client version 1.5.4

Release Notes

Added compatibility with OpenSSL 3.0 on Red Hat Linux (RHEL) 9. Resolved the vulnerability relating to System.Text.Encodings.Web.

Downloads

Download File Hashes

Windows x64

File: secretserver-sdk-1.5.4-win-x64.zip
SHA256: FA61DCCC629312397E16A87CCFE355C3DCCF6149E29C36F609A4B383E31AF777

MacOS x64

File: secretserver-sdk-1.5.4-osx-x64.zip
SHA256: 8D570AB83FE2E3C33AAF390B8082E270FBCFBCD865648BCCB154832FA2707DC8

Linux x64

File: secretserver-sdk-1.5.4-linux-x64.zip
SHA256: F4A2C0553597BF763E7F33FB95EE5A507BF7CB4187FBA8C8CDF4BEE5AFB6A406

Red Hat Enterprise Linux 6 x64

File: secretserver-sdk-1.5.4-rhel.6-x64.zip
SHA256: 1D4C5CC664458F45FE7010D531910B7B3373FF4B02A6B06C9507B5818CECDE81

SDK Client version 1.5.3

Release Notes

Added a "multi" option to the CLI. You can now select one field from multiple secrets in a single call by passing a comma-separated list of multiple Secret IDs and a field name.

Downloads

Windows x64
MacOS x64
Linux x64 (including RHEL 7 to 8—RHEL 9 uses OpenSSL v3, which the SDK does not support)
Red Hat Enterprise Linux 6 x64

Download File Hashes

Windows x64

File: secretserver-sdk-1.5.3-win-x64.zip
SHA256: 231F88106CC03434AC7E107579BB1B7686B10011F208068913F5F3762A4A5B64

MacOS x64

File: secretserver-sdk-1.5.3-osx-x64.zip
SHA256: E13657A9E80235F2404F398254E537185619DCF921546C03D28BDF17C75E1694

Linux x64

File: secretserver-sdk-1.5.3-linux-x64.zip
SHA256: 8AFAB562C35EDC4AFD5EB6B6275635A06C319FD0275318B5DE6ED61D8678FCC4

Red Hat Enterprise Linux 6 x64

File: secretserver-sdk-1.5.3-rhel.6-x64.zip
SHA256: E4E83E632FFA640A47C70A880E53DBDE38F12F2CAF6FE4441D18ECEB7D716904

SDK Client version 1.5.0

Release Notes

Cache improvements
Stability improvements

Downloads

Windows x64
MacOS x64
Linux x64 (including RHEL 7 to 8—RHEL 9 uses OpenSSL v3, which the SDK does not support)
Red Hat Enterprise Linux 6 x64

Download File Hashes

Windows x64

File: secretserver-sdk-1.5.0-win-x64.zip
SHA256: 4B3246470E4EA87190CE3B511151E93E04E7363EADBD145BA0EE8AA63BC1378B

MacOS x64

File: secretserver-sdk-1.5.0-osx-x64.zip
SHA256: 492D177CF86554EC22B947957328D833471E2DECFA7AE95FC0D2B3FFB1B24E37

Linux x64

File: secretserver-sdk-1.5.0-linux-x64.zip
SHA256: 94672CA26C438301A070C020FFAEE2932250F3358C91B30BC4F9B8F0E0A1210B

Red Hat Enterprise Linux 6 x64

File: secretserver-sdk-1.5.0-rhel.6-x64.zip
SHA256: BF0BA52C7BA0838E56C4C0C44FC29794223B04336458D342F14872FE3914E30B

SDK Client version 1.4.1

Release Notes

New option to specify a configuration and cache directory other than the default.
SDK CLI (tss) now has a --configure-directory option.
NuGet SDK packages now check for a SecretServerSdkKeyDirectory AppSetting.
Updated the NuGet SDK packages to support customizing the key storage directory. They now check for a SecretServerSdkKeyDirectory AppSetting.
Updated the NuGet SDK packages to have a SecretServerClientGetAccessToken() and GetAccessTokenAsync() method, to get a REST or SOAP API token. This is equivalent to the existing SDK CLI command token.

Downloads

Windows x64
MacOS x64
Linux x64 (including RHEL 7 to 8—RHEL 9 uses OpenSSL v3, which the SDK does not support)
Red Hat Enterprise Linux 6 x64

SDK Client version 1.3.0

Release Notes

Upgrade to .NET Core 2.1 Runtime.
Encrypt configuration with DPAPI on Windows by default.
New commands to display connection status and version.
New option to specify a key storage directory other than the default.
Target multiple OS versions with a single build.
New build for Red Hat Enterprise Linux 6.

Downloads

Windows x64
MacOS x64
Linux x64 (including RHEL 7 to 8—RHEL 9 uses OpenSSL v3, which the SDK does not support)
Red Hat Enterprise Linux 6 x64

SDK Client version 1.0.0

Release Notes

Initial release of the SDK command line tool.

Downloads

SDK NuGet Packages (Optional)

To get the SDK NuGet packages, check out the documentation on our GitHub page. This package is not required to use the SDK Client.

The SDK Client and SDK NuGet packages are two separate projects with separate versioning. We actively work to maintain feature parity between the two projects, but at times their features may differ.