Operations fundamentals

Learn basic Vault operations that are common to both Vault Community Edition and Vault Enterprise users.

Start

14 tutorials

11min
Configure Vault
Learn how to configure Vault server with specific helpful examples.
- Vault
8min
Production hardening
This tutorial provides guidance on best practices for a production hardened deployment of HashiCorp Vault.
- Vault
42min
PGP encrypted key shares
Learn how to initialize, unseal, and rekey Vault with PGP encrypted key shares.
- Vault
4min
Generate root tokens using unseal keys
Generate a new root token using a threshold of unseal keys.
- Vault
- Interactive
5min
Rekeying & rotating Vault
Learn how to generate new set of Vault unseal keys as well as rotating the underlying encryption keys.
- Vault
- Interactive
27min
Protecting Vault with resource quotas
Resource quotas allows the Vault operators to implement protections against misbehaving applications and Vault clients overdrawing resources from Vault.
- Vault
- Interactive
38min
Performance tuning
Critical tuning necessary for achieving optimal performance along with explanation of Vault resource limitations.
- Vault
40min
Identity: entities and groups
Create entities, entity aliases, and groups to maintain the Vault client's identity when the client has multiple auth methods to log in with Vault.
- Vault
- Interactive
10min
Codify management of Vault using Terraform
Use HashiCorp Terraform's Vault provider to codify Vault management to increase repeatability while reducing human errors.
- Terraform
- Vault
- Interactive
16min
Codify management of Vault Enterprise using Terraform
Use HashiCorp Terraform's Vault provider to codify Vault management to increase repeatability while reducing human errors.
- Terraform
- Vault
23min
Emergency break-glass features
Learn about the features available in Vault to respond to incidents by immediately restricting storage or API access.
- Vault
5min
Create customized HTTP headers for your Vault requests
Learn how to configure customizable HTTP headers at the HTTP root path and on API endpoints on your Vault server.
- Vault
26min
Audit device logs and incident response with Elasticsearch
Learn how to use a Vault audit device with Elasticsearch for auditing specific critical Vault events as part of your incident response workflows.
- Vault
- Terraform
21min
Apply codified Vault configuration to HCP Vault with Terraform
Learn how to use Terraform to apply codified self-hosted Vault server state to an HCP Vault cluster.
- Vault
- Terraform
- Interactive