How many Shamir’s key shares are required to unseal a Vault instance?
How many Shamir’s key shares are required to unseal a Vault instance?
The number of Shamir's key shares required to unseal a Vault instance is the threshold number of key shares. Shamir's Secret Sharing algorithm divides a secret into parts, and a specific threshold of those parts is needed to reconstruct the original secret. In the context of a Vault instance, this means that not all key shares or a quorum are required, but rather the set threshold number of key shares must be presented to unseal the Vault.
https://developer.hashicorp.com/vault/docs/internals/rotation#key-rotation