Skip to content

Unseal Key

Bas edited this page Feb 15, 2020 · 1 revision

When Hashicorp Vault starts, it is sealed, I cannot decrypt the data. A treshold of unseal keys is entered to unseal Vault. Only then authorized personel can login to use it. Unseal keys are distrbuted to trusted operators in such way that no single person holds all the keys to the kingdom.

Unseal keys are created when Vault is initialized after starting up for the first time.

vault operator init
Clone this wiki locally