Table of Contents

1. Challenge

   Unseal the Vault and Log in with the Root Token

   1. In the Vault Server, retrieve the vault keys.
   2. Unseal the vault.
   3. Log in with the Initial Root Token.
2. Challenge

   Enable KV Secrets Engine and Write a Generic Test Secret

   1. Enable a kv secrets engine at the secrets-kv path.
   2. Write a secret to the secrets-kv path.
3. Challenge

   Create a Policy That Gives Read Permissions to the KV Secrets Engine

   1. Create a policy file named my_token_policy.hcl.
   2. Populate the policy file.
   3. Write the policy.
4. Challenge

   Create a Token, Test It Out, and Then Revoke It

   1. Create a token.
   2. Copy the client_token.
   3. Log in with the newly created token.
   4. Attempt to read the secret.
   5. Attempt to write a new secret.
   6. Log in with the Initial Root Token.
   7. Revoke the client_token.