---
schema_version: "1"
id: 37af024f687622bf0bb1dd03f1c92b77efb18bc818297ece1d580191ab139c3a
title: Protecting Mule App Property Values Using RTFCTL
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/runtime-fabric/2.9/manage-secure-properties.md
canonical_url: https://docs.mulesoft.com/runtime-fabric/2.9/manage-secure-properties
source_site: docs.mulesoft.com
content_type: documentation
content_hash: fe289f996c3ddb38c3f630b36d3d99c4e00cbf05ebd534f2cdf3f51b2bba35e3
description: MuleSoft Documentation Site
release: "2.9"
latest: false
---
---
product: Runtime Fabric
version: 2.9
---

# Protecting Mule App Property Values Using RTFCTL

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Secure application properties are added in the Runtime Fabric cluster locally, stored securely, and
scoped per environment. These properties are accessible in unencrypted form by Mule applications
deployed in the scoped environment as custom properties.

Runtime Fabric protected properties always take precedence over application-level properties.

## Install rtfctl

The `rtfctl` utility is required to manage protected properties on Runtime Fabric locally. Follow
the steps to [install rtfctl](https://docs.mulesoft.com/runtime-fabric/2.9/install-rtfctl) before continuing with managing secure properties.

## Set Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to set a secure property to the Runtime Fabric under a specific
    environment, substituting the placeholder fields:

    ```copy
    rtfctl apply secure-property --key <key> --value <value> --app-namespace <app_namespace> --namespace <rtf_namespace>
    ```

    - **<key>**: The key for the secure property used in the Mule application to reference the
      value.

    - **<value>**: The value for the secure property to store.

    - **<app\_namespace>**: The Anypoint environment to scope this secure property to. Only
      applications deployed to this environment have access to this secure property.

    - **<rtf\_namespace>**:System namespace scope, defaults to `rtf`.

## View Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to view the secure properties applied to the Runtime Fabric under a
    specific environment, substituting the placeholder fields:

    ```copy
    ./rtfctl get secure-properties -n <environment_id>
    ```

    - **<environment\_id>**: The Anypoint environment ID to list the secure properties under.

## Access Secure Properties

You can access secure properties from inside your Mule application using `${my.property.name}`.

## Remove Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to remove a secure property from the Runtime Fabric in a specific
    namespace:

    ```copy
    ./rtfctl delete secure-property <my_key> -n <namespace>
    ```

    - **<my\_key>**: The key used in the Mule application to reference the secure property.

    - **<namespace>**: The namespace in which the secure property applies.

## See Also

- [Install rtfctl](https://docs.mulesoft.com/runtime-fabric/2.9/install-rtfctl)

- [Manage Proxies Used by Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/2.9/manage-proxy-self)
