open-vault/website/source/docs/http/sys-unseal.html.md
Jeff Mitchell c1d8b97342 Add reset support to the unseal command.
Reset clears the provided unseal keys, allowing the process to be begun
again. Includes documentation and unit test changes.

Fixes #695
2015-10-28 15:59:39 -04:00

1.2 KiB

layout page_title sidebar_current description
http HTTP API: /sys/seal-unseal docs-http-seal-unseal The '/sys/seal-unseal' endpoint is used to unseal the Vault.

/sys/unseal

Description
Enter a single master key share to progress the unsealing of the Vault. If the threshold number of master key shares is reached, Vault will attempt to unseal the Vault. Otherwise, this API must be called multiple times until that threshold is met.

Either the `key` or `reset` parameter must be provided; if both are provided, `reset` takes precedence.
Method
PUT
Parameters
  • key optional A single master share key.
  • reset optional A boolean; if true, the previously-provided unseal keys are discarded from memory and the unseal process is reset.
Returns
The same result as `/sys/seal-status`.