New Security Guides for Consul
The Consul Education team has created new guides to help you better secure your network communications and narrow your access permissions. Each guide provides step-by-step instructions to help you better utilize these security features.
» New ACL Tokens
Consul uses Access Control Lists (ACLs) to secure the UI, API, CLI, service communications, and agent communications. As newer versions of Consul have emerged, the syntax for ACL tokens has changed to become more precise and more flexible to manage. This guide describes the process for migrating legacy tokens present in a pre-1.4.0 Consul deployment after an upgrade to Consul 1.4+.
» OpenSSL Certificates for TLS Security
Securing your datacenter with Transport Layer Security (TLS) encryption is an important step to prepare for production deployments. This guide will provide you with a production-ready TLS configuration for RPC, Consensus, and HTTP communication. Learn how to secure RPC and consensus communication by creating and deploying certificates to Consul agents using OpenSSL as the certificate authority.
Secure Agent Communication with Existing Certificate Authority
» TLS Encryption
In this guide, you will learn how to secure RPC and consensus communication by creating and deploying certificates to Consul agents on an existing datacenter. Step-by-step instructions demonstrate how to update your existing datacenter for production-ready TLS with zero downtime.
Sign up for the latest HashiCorp news
More blog posts like this one

Vault Radar, Boundary transparent sessions, and more at HashiDays 2025
New Security Lifecycle Management (SLM) features from HashiCorp Vault, Boundary, and Consul help organizations remediate and prevent secrets exposures, improve developer access experience, and improve service discovery.

Consul 1.21 improves service discovery, Consul on Kubernetes, and supports OpenShift 4.17
HashiCorp Consul 1.21 simplifies deployment of Consul service discovery for external services, adds OpenShift 4.16 & 4.17 support, and extends snapshot support of Consul on Kubernetes to Google Cloud Storage.

HashiCorp at AWS re:Invent: Your blueprint to cloud success
If you’re attending AWS re:Invent in Las Vegas, Dec. 2 - Dec. 6th, visit us for breakout sessions, expert talks, and product demos to learn how to take a unified approach to Infrastructure and Security Lifecycle Management.