Answers: <p>I agree with @alitheg answer, and to add two my cents, sequence of commands to be executed by you or any 3 colleagues of yours who has possession of the vault unseal token</p>
  
  <pre><code>export VAULT_ADDR=https://vault.yourcompany.com  # Address of your Vault
  export VAULT_SKIP_VERIFY=true                    # this can be skipped, if you use a proper certificate and not self-signed certificate
  vault status                                     # to check the vault status
  vault unseal                                     # this will ask for the vault unseal token
  </code></pre>
  
Answers: CC BY-SA 4.0
Answers: 2019-01-16T14:53:02.383Z
Answers: 2019-01-16T14:53:02.383Z
Answers: rebelution
Answers: <p>I assume your vault would be being accessed over a network, so you would ask a colleague to use their own command line on their own workstation to enter their key. Mine requires 3 keys to unseal so I just have 3 users independently enter the <code>vault unseal</code> command with their key.</p>
  
Answers: CC BY-SA 3.0
Answers: 2017-11-03T16:14:40.220Z
Answers: 2017-11-03T16:14:40.220Z
Answers: alitheg
Body: <p>It is possible to force that multiple keys have to be entered in order to unseal the vault. How does this work in practice? If someone has entered a key and there is another key required to unseal the vault should one ask a colleague to enter another key and how should this be done to prevent that colleague A or someone else sees that key?</p>
  
Tags: <hashicorp-vault>
Title: How to unseal a Vault in practice?
UserDisplayName: 030
ThreadText: # How to unseal a Vault in practice?
  
  (Asked by: username_0 on 2017-10-29)
  
  It is possible to force that multiple keys have to be entered in order to unseal the vault. How does this work in practice? If someone has entered a key and there is another key required to unseal the vault should one ask a colleague to enter another key and how should this be done to prevent that colleague A or someone else sees that key?
  
  **Tags:** hashicorp-vault
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_2 on 2017-11-03. Score: 4 | Accepted answer
  
  I assume your vault would be being accessed over a network, so you would ask a colleague to use their own command line on their own workstation to enter their key. Mine requires 3 keys to unseal so I just have 3 users independently enter the `vault unseal` command with their key.
  
  
  ---
  
  ### Answer by username_1 on 2019-01-16. Score: 0
  
  I agree with @username_2 answer, and to add two my cents, sequence of commands to be executed by you or any 3 colleagues of yours who has possession of the vault unseal token
  
  ```
  export VAULT_ADDR=https://vault.yourcompany.com  # Address of your Vault
  export VAULT_SKIP_VERIFY=true                    # this can be skipped, if you use a proper certificate and not self-signed certificate
  vault status                                     # to check the vault status
  vault unseal                                     # this will ask for the vault unseal token
  
  ```
  
  
  ---
  
  