Reference: Vault unsealing

Unsealing

By default, Vault units are sealed upon Vault initialisation and every time units restart. Users have to manually unseal Vault units in order for them to become active. For more information about this topic, read the following documents: