Vault init failure

[Shashank Parab]

Hi All,

I am trying to initialise vault using api. But its failing with error : 

{"errors":["recovery configuration must specify a positive number of shares"]}

Below are more details

#Command

curl --request PUT -d '{"secret_shares": 1, "secret_threshold": 1}' http://127.0.0.1:8200/v1/sys/init

#Config

log_level = "trace"

api_addr  = "http://127.0.0.1:8200"

ui        = true

storage "s3" {

bucket = "vault-storage"

region = "eu-west-1"

}

listener "tcp" {

address = "0.0.0.0:8200"

tls_disable = 1

}

seal "awskms" {

region = "eu-west-1"

kms_key_id = "xxxxx"

}

[Nicholas Keenan]

Hi Shashank,

We're running into the same issue. Did you ever find a solution to get this working?

Thanks

[Michel Vocks]

Hi there!

Auto-Unseal uses the recovery key options for initialization. This should work:

curl --request PUT -d '{"recovery_shares": 1, "recovery_threshold": 1}' http://127.0.0.1:8200/v1/sys/init

This is also mentioned in the documentation: https://www.vaultproject.io/docs/concepts/seal.html#auto-unseal

Cheers,

Michel