Answers: <p>According to <a href="https://www.vaultproject.io/docs/internals/high-availability.html" rel="nofollow noreferrer">this documentation</a> two vault servers have to be run. One of them has to be active and the other passive. In order to run such a setup both vault servers need to be unsealed.</p>
  
Answers: CC BY-SA 4.0
Answers: 2017-11-26T13:24:42.943Z
Answers: 2019-12-23T08:25:54.530Z
Answers: 2019-12-23T08:25:54.530Z
Answers: 030
Answers: <p>Well, the first step is to use a backend which supports HA. Consul, for example, supports HA. If you are not an enterprise customer, you may have to run a shell script via cron to upload consul snapshots to s3 or where ever you want to store them. Later, you can restore all your secrets. And obviously, the snapshots are encrypted. </p>
  
Answers: CC BY-SA 4.0
Answers: 2018-10-02T20:31:28.903Z
Answers: 2018-10-05T18:27:38.023Z
Answers: 2018-10-05T18:27:38.023Z
Answers: pichekistha
Body: <p><a href="https://www.vaultproject.io/guides/production.html" rel="nofollow noreferrer">The Production Hardening document</a> indicates how to harden Vault for production purposes, but what if Vault is run on for example Digital Ocean and the platform is unavailable or the disk gets corrupted?</p>
  
Tags: <hashicorp-vault><high-availability>
Title: What are best practices for running Hashicorp's Vault in terms of high availability?
UserDisplayName: 030
ThreadText: # What are best practices for running Hashicorp's Vault in terms of high availability?
  
  (Asked by: username_0 on 2017-08-14)
  
  [The Production Hardening document](https://www.vaultproject.io/guides/production.html) indicates how to harden Vault for production purposes, but what if Vault is run on for example Digital Ocean and the platform is unavailable or the disk gets corrupted?
  
  **Tags:** hashicorp-vault, high-availability
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_0 on 2017-11-26. Score: 1 | Accepted answer
  
  According to [this documentation](https://www.vaultproject.io/docs/internals/high-availability.html) two vault servers have to be run. One of them has to be active and the other passive. In order to run such a setup both vault servers need to be unsealed.
  
  
  ---
  
  ### Answer by username_1 on 2018-10-02. Score: 1
  
  Well, the first step is to use a backend which supports HA. Consul, for example, supports HA. If you are not an enterprise customer, you may have to run a shell script via cron to upload consul snapshots to s3 or where ever you want to store them. Later, you can restore all your secrets. And obviously, the snapshots are encrypted.
  
  
  ---
  
  