Update the Cloud Service Provider to accept cache-only keys:

To enable cache-only keys

1. In the Vault web GUI, find the SFDC Cloud Service Provider account that you created.
2. Update the Named Credential ID with the ID that you copied from Salesforce.
3. Click Save.