---
title: "Enter a single unseal key share to progress the root generation attempt."
method: POST
path: "/sys/generate-root/update"
tags: ["system"]
---

# Enter a single unseal key share to progress the root generation attempt.

`POST /sys/generate-root/update`

If the threshold number of unseal key shares is reached, Vault will complete the root generation and issue the new token. Otherwise, this API must be called multiple times until that threshold is met. The attempt nonce must be provided with each call.

## Request body

- SystemGenerateRootUpdateRequest
  - `key` string — Specifies a single unseal key share.
  - `nonce` string — Specifies the nonce of the attempt.

## Response `200`

OK

---

[API](https://skmtc.net/lensesio/apis/hashicorp-vault-api.md) · [All operations](https://skmtc.net/lensesio/apis/hashicorp-vault-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lensesio/hashicorp-vault-api/versions/bd8194de0697/schema)