Install and update vault license.
Store license.
$ sudo -u vault tee /etc/vault.d/vault.hclic << EOF 02MV4UU43BK5HGYYTOJZWF[...]SZLNRDVA52MG5VEE6CJG5DU6YLLGZKWC2LBJBXWK2ZQKJKG6NZSIRIT2PI EOF
Define license location inside vault configuration file.
$ sudo -u vault tee --append /etv/vault.d/vault.hcl << EOF # Enterprise license_path license_path = "/etc/vault.d/vault.hclic"
Start vault service.
$ sudo systemctl start vault
Unseal vault.
$ vault operator unseal
Inspect service status.
$ vault status
Key Value --- ----- Seal Type shamir Initialized true Sealed false Total Shares 1 Threshold 1 Version 1.11.0+ent Build Date 2022-06-17T22:49:59Z Storage Type consul Cluster Name vault-cluster-d49add11 Cluster ID d73bc1ff-d088-e602-959c-cc72be323da9 HA Enabled true HA Cluster https://172.16.148.16:8201 HA Mode standby Active Node Address https://172.16.148.16:8200
Display license status.
$ vault read sys/license/status
WARNING! The following warnings were returned from Vault: * time left on license is 469h9m0s Key Value --- ----- autoloaded map[expiration_time:2022-08-14T11:33:57Z features:[HSM Performance Replication DR Replication MFA Sentinel Seal Wrapping Control Groups Performance Standby Namespaces KMIP Entropy Augmentation Transform Secrets Engine Lease Count Quotas Key Management Secrets Engine Automated Snapshots] license_id:0c04379c-8dd6-4b3d-ac1d-01b6c445dc2f performance_standby_count:9999 start_time:2022-07-15T11:33:57Z termination_time:2022-08-15T11:33:57Z] autoloading_used true persisted_autoload map[expiration_time:2022-08-14T11:33:57Z features:[HSM Performance Replication DR Replication MFA Sentinel Seal Wrapping Control Groups Performance Standby Namespaces KMIP Entropy Augmentation Transform Secrets Engine Lease Count Quotas Key Management Secrets Engine Automated Snapshots] license_id:0c04379c-8dd6-4b3d-ac1d-01b6c445dc2f performance_standby_count:9999 start_time:2022-07-15T11:33:57Z termination_time:2022-08-15T11:33:57Z]
Display license status using JSON format.
$ vault read -format json sys/license/status
{
"request_id": "511457f3-d547-58fb-e24b-5b1bf1b1c4ab",
"lease_id": "",
"lease_duration": 0,
"renewable": false,
"data": {
"autoloaded": {
"expiration_time": "2022-08-14T11:33:57Z",
"features": [
"HSM",
"Performance Replication",
"DR Replication",
"MFA",
"Sentinel",
"Seal Wrapping",
"Control Groups",
"Performance Standby",
"Namespaces",
"KMIP",
"Entropy Augmentation",
"Transform Secrets Engine",
"Lease Count Quotas",
"Key Management Secrets Engine",
"Automated Snapshots"
],
"license_id": "0c04379c-8dd6-4b3d-ac1d-01b6c445dc2f",
"performance_standby_count": 9999,
"start_time": "2022-07-15T11:33:57Z",
"termination_time": "2022-08-15T11:33:57Z"
},
"autoloading_used": true,
"persisted_autoload": {
"expiration_time": "2022-08-14T11:33:57Z",
"features": [
"HSM",
"Performance Replication",
"DR Replication",
"MFA",
"Sentinel",
"Seal Wrapping",
"Control Groups",
"Performance Standby",
"Namespaces",
"KMIP",
"Entropy Augmentation",
"Transform Secrets Engine",
"Lease Count Quotas",
"Key Management Secrets Engine",
"Automated Snapshots"
],
"license_id": "0c04379c-8dd6-4b3d-ac1d-01b6c445dc2f",
"performance_standby_count": 9999,
"start_time": "2022-07-15T11:33:57Z",
"termination_time": "2022-08-15T11:33:57Z"
}
},
"warnings": [
"time left on license is 469h2m31s"
]
}
Reload license after update.
$ vault write -force sys/config/reload/license
Success! Data written to: sys/config/reload/license
Inspect logs.
$ journalctl -u vault -f
[...]
Jul 25 22:30:21 vault-1 vault[28287]: 2022-07-25T22:30:21.127Z [INFO] core.licensing: core: licensing update: old license="{\"license_id\":\"0c04379c-8dd6-4b3d-ac1d-01b6c445dc2f\",\"customer_id\":\"af2e6243-e8a1-7c74-d2bb-aca302ccc16e\",\"installation_id\":\"*\",\"issue_time\":\"2022-07-15T11:33:57.972779547Z\",\"start_time\":\"2022-07-15T11:33:57Z\",\"expiration_time\":\"2022-08-14T11:33:57Z\",\"flags\":{\"modules\":[\"multi-dc-scale\",\"governance-policy\",\"advanced-data-protection\"]},\"features\":[\"HSM\",\"Performance Replication\",\"DR Replication\",\"MFA\",\"Sentinel\",\"Seal Wrapping\",\"Control Groups\",\"Performance Standby\",\"Namespaces\",\"KMIP\",\"Entropy Augmentation\",\"Transform Secrets Engine\",\"Lease Count Quotas\",\"Key Management Secrets Engine\",\"Automated Snapshots\"],\"performance_standby_count\":9999}" new license="{\"license_id\":\"0c04379c-8dd6-4b3d-ac1d-01b6c445dc2f\",\"customer_id\":\"af2e6243-e8a1-7c74-d2bb-aca302ccc16e\",\"installation_id\":\"*\",\"issue_time\":\"2022-07-15T11:33:57.972779547Z\",\"start_time\":\"2022-07-15T11:33:57Z\",\"expiration_time\":\"2022-08-14T11:33:57Z\",\"flags\":{\"modules\":[\"multi-dc-scale\",\"governance-policy\",\"advanced-data-protection\"]},\"features\":[\"HSM\",\"Performance Replication\",\"DR Replication\",\"MFA\",\"Sentinel\",\"Seal Wrapping\",\"Control Groups\",\"Performance Standby\",\"Namespaces\",\"KMIP\",\"Entropy Augmentation\",\"Transform Secrets Engine\",\"Lease Count Quotas\",\"Key Management Secrets Engine\",\"Automated Snapshots\"],\"performance_standby_count\":9999}"
[...]
