transit

[!IMPORTANT]
Documentation Update: Product documentation, which were located in this repository under /website, are now located in hashicorp/web-unified-docs, colocated with all other product documentation. Contributions to this content should be done in the web-unified-docs repo, and not this one. Changes made to /website content in this repo will not be reflected on the developer.hashicorp.com website.

The transit command groups subcommands for interacting with Vault's Transit Secrets Engine.

Syntax

Option flags for a given subcommand are provided after the subcommand, but before the arguments.

Examples

To import keys into a mount via the Transit BYOK mechanism, use the vault transit import <path> <key> or vault transit import-version <path> <key> commands:

$ vault transit import transit/keys/test-key @test-key type=rsa-2048
Retrieving transit wrapping key.
Wrapping source key with ephemeral key.
Encrypting ephemeral key with transit wrapping key.
Submitting wrapped key.
Success!