| layout | page_title | description |
|---|---|---|
docs |
operator seal - Command |
The "operator seal" command seals the Vault server. Sealing tells the Vault server to
stop responding to any operations until it is unsealed. When sealed, the Vault
server discards its in-memory root key to unlock the data, so it is
physically blocked from responding to operations unsealed. |
The operator seal seals the Vault server. Sealing tells the Vault server to
stop responding to any operations until it is unsealed. When sealed, the Vault
server discards its in-memory root key to unlock the data, so it is physically
blocked from responding to operations unsealed.
If an unseal is in progress, sealing the Vault will reset the unsealing process. Users will have to re-enter their portions of the root key again.
This command does nothing if the Vault server is already sealed.
For more information on sealing and unsealing, please the seal concepts page.
Seal a Vault server:
$ vault operator seal
Success! Vault is sealed.
There are no flags beyond the standard set of flags included on all commands.