3 ms·
Hashicorp Vault by default makes use of this mechanism to ensure certain actions (most notably starting Vault and unlocking the secret store for use) require mu
by jon-wood 4y ago
Hashicorp Vault by default makes use of this mechanism to ensure certain actions (most notably starting Vault and unlocking the secret store for use) require multiple users to approve it.
- alipitch 4y agoThanks. Going through the docs now. https://www.vaultproject.io/docs/concepts/seal#shamir-seals https://www.vaultproject.io/docs/concepts/seal#shamir-seals Shamir seals The default Vault config uses a Shamir seal. Instead of distributing the unseal key as a single key to an operator, Vault uses an algorithm known as Shamir's Secret Sharing to split the key into shards.