Overview of Secret Launchers and Protocol Handlers

The relationship between Secret Server launchers and protocol handlers is integral to the functionality of Secret Server in automating and securing access to various applications and systems.

Secret Launchers

Secret launchers are tools within Secret Server that allow users to launch applications and automatically log in using credentials stored in Secret Server . There are several types of launchers, including:

These launchers provide a convenient method to open connections without requiring users to know or manually enter their passwords. For example, a web launcher can automatically log into websites using the client’s browser.

Protocol Handlers

A protocol handler is an application installed on an end-user’s machine that facilitates communication between Secret Server and the client machine. It also provides the necessary files for the launchers to function. When a user initiates a launcher, the protocol handler:

  1. Bootstraps the client-side application.
  2. Communicates with Secret Server over HTTP(S) to ensure it is the latest version and initiates an upgrade if necessary.
  3. Bootstraps the target launcher type and begins the process of securely logging in the user.

The protocol handler ensures that credentials are retrieved securely from Secret Server using signed AES-256-encrypted messages, adding an extra layer of security.

Managing Multiple Instances

In environments with multiple instances of Secret Server , users might need to manage different versions of the protocol handler. To address this, the protocol handler auto-update function can be disabled, allowing users to manually update their protocol handlers as necessary.

Custom Launchers

Custom launchers extend the functionality of Secret Server by allowing integration with any application that can be started via the command line. They pass values from the secret text fields to the command-line of the application being launched, enabling users to initiate processes or connect to services directly from the Secret Server interface without manually entering credentials.