Chocolatey Central Management gives you the ability to create sensitive variables for use in Deployment Steps.

The Sensitive Variables page can be accessed from the Administration section of Chocolatey Central Management. The page is only visible to users who have permissions to create or delete sensitive variables.

Chocolatey Central Management dashboard, arrow pointing to Sensitive Variables menu in the left sidebar entry.

Creating a new Sensitive Variable

  1. From the Chocolatey Central Management Dashboard, select Administration > Sensitive Variables from the left sidebar.

    Chocolatey Central Management dashboard, arrow pointing to Sensitive Variables menu in the left sidebar entry.

  2. Select the ➕ Create new sensitive variable button at the top of the page.

    CCM Sensitive Variables page, arrow pointing to Create new sensitive variable button

  3. Fill in the details and click Save.

    Fill in Sensitive Variables information

Alternatively, variables can also be added from an Deployment Step Advanced script by clicking the ➕ in the upper right corner.

Sensitive Variables Added from the Advanced script of a Deployment Step

Adding Sensitive Variables to scripts

:choco-warning: WARNING

To ensure that you don't accidentally leak sensitive information into Chocolatey logs, be sure to use them with commands or parameters that are hidden from the logs.

  1. In an Advanced script of a Deployment Step, select the variable to insert from the Sensitive Variables drop down.

Deployment Step Advanced script, with an arrow pointing to the Sensitive Variables selection dropdown.

Deleting Sensitive Variables

  1. From the Chocolatey Central Management Dashboard, select Administration > Sensitive Variables from the left sidebar.

    Central Management dashboard, arrow pointing to Sensitive Variables menu in the left sidebar entry on the CCM Dashboard

  2. Select 🗑️ Delete beside the Sensitive Variable you wish to delete.

    Sensitive Variables page with arrow to a delete button

Editing / Changing Sensitive Variables

You cannot change or edit a Sensitive Variable directly. If you need to change the value a Sensitive Variable has, please delete it and create it again.