# RadiusSecretStoreType

- Kind: `enum`
- Package: [Aspire.Hosting.Radius](/reference/api/csharp/aspire.hosting.radius.md)
- Version: `13.6.0-preview.1.26478.8`
- Namespace: `Aspire.Hosting.Radius`
- Target framework: `net10.0`
- Source: [GitHub](https://github.com/microsoft/aspire/blob/f4c27f2d43ddc1cacd0dd083b30d1fea1cee7a62/src/Aspire.Hosting.Radius/Publishing/RadiusSecretStoreType.cs)

The Radius secret-store type, mapping 1:1 to the `Applications.Core/secretStores` `properties.type` string values. The type drives required-key validation ( `ASPIRERADIUS040`) and the default per-key `encoding` ( `ASPIRERADIUS047`).

## Definition

```csharp
namespace Aspire.Hosting.Radius;

public enum RadiusSecretStoreType
```

## Enum Members

| Name | Value | Description |
| --- | --- | --- |
| Generic | 0 | An untyped secret store (Radius generic); no required keys; default encoding raw. |
| Certificate | 1 | A TLS certificate store (Radius certificate, maps to kubernetes.io/tls). Requires tls.crt and tls.key; encoding must be base64. |
| BasicAuthentication | 2 | Basic-authentication credentials (Radius basicAuthentication). Requires username and password. |
| AzureWorkloadIdentity | 3 | Azure workload-identity credentials (Radius azureWorkloadIdentity). Requires clientId and tenantId. |
| AwsIrsa | 4 | AWS IRSA credentials (Radius awsIRSA). Requires roleARN. |