2017-09-08 02:09:46 +00:00
|
|
|
---
|
|
|
|
layout: "docs"
|
|
|
|
page_title: "operator seal - Command"
|
2018-10-29 19:58:37 +00:00
|
|
|
sidebar_title: "<code>seal</code>"
|
2017-09-08 02:09:46 +00:00
|
|
|
sidebar_current: "docs-commands-operator-seal"
|
|
|
|
description: |-
|
2018-09-26 17:55:04 +00:00
|
|
|
The "operator seal" command seals the Vault server. Sealing tells the Vault server to
|
2017-09-08 02:09:46 +00:00
|
|
|
stop responding to any operations until it is unsealed. When sealed, the Vault
|
|
|
|
server discards its in-memory master key to unlock the data, so it is
|
|
|
|
physically blocked from responding to operations unsealed.
|
|
|
|
---
|
|
|
|
|
|
|
|
# operator seal
|
|
|
|
|
|
|
|
The `operator seal` seals the Vault server. Sealing tells the Vault server to
|
|
|
|
stop responding to any operations until it is unsealed. When sealed, the Vault
|
|
|
|
server discards its in-memory master key to unlock the data, so it is physically
|
|
|
|
blocked from responding to operations unsealed.
|
|
|
|
|
|
|
|
If an unseal is in progress, sealing the Vault will reset the unsealing process.
|
|
|
|
Users will have to re-enter their portions of the master key again.
|
|
|
|
|
|
|
|
This command does nothing if the Vault server is already sealed.
|
|
|
|
|
|
|
|
For more information on sealing and unsealing, please the [seal concepts
|
|
|
|
page](/docs/concepts/seal.html).
|
|
|
|
|
|
|
|
## Examples
|
|
|
|
|
|
|
|
Seal a Vault server:
|
|
|
|
|
|
|
|
```text
|
|
|
|
$ vault operator seal
|
|
|
|
Success! Vault is sealed.
|
|
|
|
```
|
|
|
|
|
|
|
|
## Usage
|
|
|
|
|
|
|
|
There are no flags beyond the [standard set of flags](/docs/commands/index.html)
|
|
|
|
included on all commands.
|