---
schema_version: "1"
id: 14755a87d5679e671e4829a9c19bf42fcad87b599d37c7dccef5850c5c246e48
title: Protecting Mule App Property Values Using RTFCTL
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/runtime-fabric/latest/manage-secure-properties.md
canonical_url: https://docs.mulesoft.com/runtime-fabric/latest/manage-secure-properties
source_site: docs.mulesoft.com
content_type: documentation
content_hash: b2b3242e1464b336f2d953515d9931cb3acbe869a94c68f4f381b25a0060ed6c
description: MuleSoft Documentation Site
release: "3.0"
latest: true
---
---
product: Runtime Fabric
version: 3.0
is-latest-version: true
---

# Protecting Mule App Property Values Using RTFCTL

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Secure application properties are added in the Runtime Fabric cluster locally, stored securely, and
scoped per environment. These properties are accessible in unencrypted form by Mule applications
deployed in the scoped environment as custom properties.

Runtime Fabric protected properties always take precedence over application-level properties.

## Install rtfctl

The `rtfctl` utility is required to manage protected properties on Runtime Fabric locally. Follow
the steps to [install rtfctl](https://docs.mulesoft.com/runtime-fabric/latest/install-rtfctl) before continuing with managing secure properties.

## Set Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to set a secure property to the Runtime Fabric under a specific
    environment, substituting the placeholder fields:

    ```copy
    rtfctl apply secure-property --key <key> --value <value> --app-namespace <app_namespace> --namespace <rtf_namespace>
    ```

    - **<key>**: The key for the secure property used in the Mule application to reference the
      value.

    - **<value>**: The value for the secure property to store.

    - **<app\_namespace>**: The actual namespace to scope this secure property to. Only applications
      deployed to this namespace have access to this secure property.

      - For [customized namespaces](https://docs.mulesoft.com/runtime-fabric/latest/create-custom-namespace), use the actual namespace name.

    - **<rtf\_namespace>**:System namespace scope, defaults to `rtf`.

> [!NOTE] When applying secure properties to applications deployed in customized namespaces, you
> must specify the actual namespace name in the `--app-namespace` parameter, not the environment ID
> or the default namespace name. For example, if you created a customized namespace named
> `my-custom-namespace`, use that name in the command:
>
> -
>
> ```copy
> rtfctl apply secure-property --key test --value test --app-namespace my-custom-namespace --namespace rtf
> ```

## View Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to view the secure properties applied to the Runtime Fabric under a
    specific environment, substituting the placeholder fields:

    ```copy
    ./rtfctl get secure-properties -n <environment_id>
    ```

    - **<environment\_id>**: The Anypoint environment ID to list the secure properties under.

## Access Secure Properties

You can access secure properties from inside your Mule application using `$key`, which is the key
provided in the `rtfctl apply` command. You can retrieve the key the same way you retrieve any other
[configuration property](https://docs.mulesoft.com/mule-runtime/latest/configuring-properties).

## Remove Secure Properties

1.  Log into a controller node where `rtfctl` is installed.

2.  Run the following command to remove a secure property from the Runtime Fabric in a specific
    namespace:

    ```copy
    ./rtfctl delete secure-property <my_key> -n <namespace>
    ```

    - **<my\_key>**: The key used in the Mule application to reference the secure property.

    - **<namespace>**: The namespace in which the secure property applies.

## See Also

- [Install rtfctl](https://docs.mulesoft.com/runtime-fabric/latest/install-rtfctl)

- [Manage Proxies Used by Runtime Fabric](https://docs.mulesoft.com/runtime-fabric/latest/manage-proxy-self)