Operations fundamentals

Learn basic Vault operations that are common to both Vault Community Edition and Vault Enterprise users.

Start

13 tutorials

8min
Harden server deployments
Harden your production deployments with baseline and extended recommendations.
- Vault
42min
Use PGP encrypted key shares to unseal Vault
Initialize, unseal, and rekey Vault with PGP encrypted key shares.
- Vault
5min
Rekey the server and rotate its encryption key
Generate a new set of server unseal or recovery keys, and rotate the encryption key.
- Vault
- Interactive
29min
Protect against resource exhaustion
Implement protections to prevent misbehaving applications and clients from exhausting available resources.
- Vault
- Interactive
37min
Tune server performance
Understand the configuration and settings you can tune to gain increased server performance.
- Vault
40min
Implement identity entities and groups
Create entities, entity aliases, and groups to establish and manage Vault client identity across multiple auth methods.
- Vault
- Interactive
10min
Codify cluster management with Terraform
Improve collaboration, increase repeatability, and reduce human errors by codifying Vault Enterprise management with the Terraform Vault provider.
- Terraform
- Vault
- Interactive
16min
Codify Vault Enterprise management with Terraform
Improve collaboration, increase repeatability, and reduce human errors by codifying Vault Enterprise management with the Terraform Vault provider.
- Terraform
- Vault
23min
Restrict API and storage access during incident response
Respond to incidents with features you can use to restrict storage or API access.
- Vault
5min
Define custom HTTP headers
Configure your Vault server with customized HTTP headers at the HTTP root path and on API endpoints.
- Vault
27min
Audit Vault with Elasticsearch for incident response
Audit Vault server requests and responses with Elasticsearch as part of your proactive incident response workflow.
- Vault
- Terraform
21min
Migrate to HCP Vault Dedicated with codified configuration
Use Terraform to migrate a self-hosted Vault server to HCP Vault Dedicated with configuration as code.
- Vault
- Terraform
- Interactive
27min
Benchmark Vault performance
Run vault-benchmark to test the performance of Vault auth methods and secrets engines.
- Vault
- Interactive