Ace Your VA-002-P HashiCorp Security Automation Certification Exam

Unsealing is the process of obtaining the plaintext master key necessary to read the decryption key to decrypt the data, allowing access to the Vault. The master key is used to decrypt the encryption key which can unencrypt the data on the storage backend.

Vault supports AWS, Azure, Google Cloud, and Alibaba Cloud out of the box for secrets engines

Service Tokens

Service tokens are what users will generally think of as "normal" Vault tokens. They support all features, such as renewal, revocation, creating child tokens, and more. They are correspondingly heavyweight to create and track.

Batch Tokens

Batch tokens are encrypted blobs that carry enough information for them to be used for Vault actions, but they require no storage on disk to track them. As a result, they are extremely lightweight and scalable but lack most of the flexibility and features of service tokens.

Reference link:- https://www.vaultproject.io/docs/concepts/tokens

If you're running Vault in a non-prod environment, you can configure Vault to disable TLS.

In this case, TLS has been disabled but the default value for VAULT_ADDR is https://127.0.0.1:8200, therefore Vault is sending the request over HTTPS but Vault is responding using HTTP since TLS is disabled.

To handle this error, set the VAULT_ADDR environment variable to "http://127.0.0.1:8200 ".