<p>According to <a href="https://www.vaultproject.io/docs/internals/high-availability.html" rel="nofollow noreferrer">this documentation</a> two vault servers have to be run. One of them has to be active and the other passive. In order to run such a setup both vault servers need to be unsealed.</p>

CC BY-SA 4.0
2017-11-26T13:24:42.943Z
2019-12-23T08:25:54.530Z
2019-12-23T08:25:54.530Z
030
<p>Well, the first step is to use a backend which supports HA. Consul, for example, supports HA. If you are not an enterprise customer, you may have to run a shell script via cron to upload consul snapshots to s3 or where ever you want to store them. Later, you can restore all your secrets. And obviously, the snapshots are encrypted. </p>

CC BY-SA 4.0
2018-10-02T20:31:28.903Z
2018-10-05T18:27:38.023Z
2018-10-05T18:27:38.023Z
pichekistha
<p><a href="https://www.vaultproject.io/guides/production.html" rel="nofollow noreferrer">The Production Hardening document</a> indicates how to harden Vault for production purposes, but what if Vault is run on for example Digital Ocean and the platform is unavailable or the disk gets corrupted?</p>

<hashicorp-vault><high-availability>
What are best practices for running Hashicorp's Vault in terms of high availability?
030
# What are best practices for running Hashicorp's Vault in terms of high availability?

(Asked by: username_0 on 2017-08-14)

[The Production Hardening document](https://www.vaultproject.io/guides/production.html) indicates how to harden Vault for production purposes, but what if Vault is run on for example Digital Ocean and the platform is unavailable or the disk gets corrupted?

**Tags:** hashicorp-vault, high-availability


---

## 2 answers

### Answer by username_0 on 2017-11-26. Score: 1 | Accepted answer

According to [this documentation](https://www.vaultproject.io/docs/internals/high-availability.html) two vault servers have to be run. One of them has to be active and the other passive. In order to run such a setup both vault servers need to be unsealed.


---

### Answer by username_1 on 2018-10-02. Score: 1

Well, the first step is to use a backend which supports HA. Consul, for example, supports HA. If you are not an enterprise customer, you may have to run a shell script via cron to upload consul snapshots to s3 or where ever you want to store them. Later, you can restore all your secrets. And obviously, the snapshots are encrypted.


---

