When enabling auto-unseal, how do you specify the seal type? (Choose two.)
Select an option, then click Submit answer.
Reference / correct answer:
Set the VAULT_SEAL_TYPE environment variable
Most accepted answer: A. Set the VAULT_SEAL_TYPE environment variable
Community votes: A=1, C=1, D=1, E=1
Selected Answer: AD AD The presence of a seal "awskms" block in Vault's configuration file The presence of the environment variable VAULT_SEAL_TYPE set to awskms. If enabling via environment variable, all other required values specific to AWS KMS (i.e. VAULT_AWSKMS_SEAL_KEY_ID) must be also supplied, as well as all other AWS-related environment variables that lends to successful authentication (i.e. AWS_ACCESS_KEY_ID, etc.). upvoted 1 times nginx_aws 1 year, 9 months ago Are these questions still valid? upvoted 1 times ...
Are these questions still valid? upvoted 1 times
CE https://developer.hashicorp.com/vault/docs/commands/operator/init This section explains it in detail: Migration from shamir to auto unseal To migrate from Shamir keys to Auto Unseal, take your server cluster offline and update the seal configuration with the appropriate seal configuration. Bring your server back up and leave the rest of the nodes offline if using multi-server mode, then run the unseal process with the -migrate flag and bring the rest of the cluster online. All unseal commands must specify the -migrate flag. Once the required threshold of unseal keys are entered, unseal keys will be migrated to recovery keys. $ vault operator unseal -migrate upvoted 1 times
Selected Answer: CE https://developer.hashicorp.com/vault/docs/concepts/seal#auto-unseal & https://developer.hashicorp.com/vault/docs/commands/operator/init upvoted 3 times
