---
schema_version: "1"
id: 6410d814da0ed450fda97f2142159828301eea93df5bbeed56bec73eed3f138f
title: Protecting App Property Values with rtfctl
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/runtime-fabric/2.5/manage-secure-properties.md
canonical_url: https://docs.mulesoft.com/runtime-fabric/2.5/manage-secure-properties
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 78bf77dfe81ab7a7028c00b9c474be40a86f096ff7803432c7a1031a267d82bb
description: MuleSoft Documentation Site
release: "2.5"
latest: false
---
---
product: Runtime Fabric
version: 2.5
---

# Protecting App Property Values with rtfctl

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Secure application properties are added in the Runtime Fabric cluster locally, stored securely, and
scoped per environment. These properties are accessible in unencrypted form by Mule applications
deployed in the scoped environment as custom properties.

Runtime Fabric protected properties always take precedence over application-level properties.

## Install rtfctl

The `rtfctl` utility is required to manage protected properties on Runtime Fabric locally. Follow
the steps to [install rtfctl](https://docs.mulesoft.com/runtime-fabric/2.5/install-rtfctl) before continuing with managing secure properties.

## Set Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to set a secure property to the Runtime Fabric under a specific
    environment, substituting the placeholder fields:

    ```copy
    rtfctl apply secure-property --key <key> --value <value> --app-namespace <app_namespace> --namespace <rtf_namespace>
    ```

    - **<key>**: The key for the secure property used in the Mule application to reference the
      value.

    - **<value>**: The value for the secure property to store.

    - **<app\_namespace>**: The Anypoint environment to scope this secure property to. Only
      applications deployed to this environment have access to this secure property.

    - **<rtf\_namespace>**:System namespace scope, defaults to `rtf`.

## View Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to view the secure properties applied to the Runtime Fabric under a
    specific environment, substituting the placeholder fields:

    ```copy
    ./rtfctl get secure-properties -n <environment_id>
    ```

    - **<environment\_id>**: The Anypoint environment ID to list the secure properties under.

## Access Secure Properties

You can access secure properties from inside your Mule application using `${my.property.name}`.

## Remove Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to remove a secure property from the Runtime Fabric in a specific
    namespace:

    ```copy
    ./rtfctl delete secure-property <my_key> -n <namespace>
    ```

    - **<my\_key>**: The key used in the Mule application to reference the secure property.

    - **<namespace>**: The namespace in which the secure property applies.

## See Also

- [Install rtfctl](https://docs.mulesoft.com/runtime-fabric/2.5/install-rtfctl)

- [Manage Proxies Used by Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/2.5/manage-proxy-self)