Vault HA - What happens if you lose transit engine?

Using this as an HA guide

What happens if Vault 1 with the unseal transit secrets engine becomes permanently unavailable? Can you migrate to a new one? Does it just encrypt the unseal keys you captured when initialising the other instances of vault?

If you lose, irrecoverably, any auto-unseal method, the Vault protected by it is irrecoverably lost.

Never use any auto-unseal method unless you have extreme trust in its availability and resilience.

1 Like