Currently the default and the only encryption method in Credential Vault is AES-256 in CBC mode.
You can now use additional encryption methods in Credential Vault. If you want to set a specific encryption method globally, you can select the option from Settings > Server Settings > Default Credential Vault Cipher field. These encryption methods are FIPS compliant ensuring both product security and seamless functionality, even when the product is switched to FIPS mode.
You can also set different encryption methods for different resources in the Credential Vault.
From the home page of the Privileged Access Manager, click Credential Vault.
Select the specific resource for which you want to set this option, for example: Windows Host.
Click the Edit icon to modify the credential’s details.
Select the encryption method for the resource using the Encryption Type drop down list.
NOTE:The selected cipher is used by default to all the new credentials.