Is it worth to rotate the root tokens in vault or should we create multiple root tokens for different stakeholders likewise unseal shamir-keys?
please suggest.
Generally speaking we don’t recommend having any live root tokens ever except when they’re specifically being used. See https://www.vaultproject.io/docs/concepts/tokens.html#root-tokens
2 Likes