Overview

This page contains the list of deprecations and important or breaking changes for Vault 1.7.0 compared to 1.6. Please read it carefully.

Barrier Key Auto-Rotation

If your Vault installation is at least a year old, the barrier key will be automatically rotated once, and then subsequently will be rotated per the settings in the new sys/rotate/config endpoint. This is a precaution to ensure the number of encryptions performed by the barrier key is fewer than that rrecommended by NIST SP 800-38D.