Create and manage keys

Prerequisites

• You have a key ring: Create and manage key rings

Create a key

STACKIT Portal

1. On the left bar click on KMS.

2. Navigate to the key ring for which you want to create a key and click on it. Then, on the left bar click on Keys.

3. On the top bar click on Create Key.

4. Fill in the needed information:

   Key name

   Enter a key name of your choice. You can’t change it afterwards.

   Description

   Optionally enter a description of your choice.

   Purpose and Algorithm

   Specify the intented usage of the key and a key algorithm. Consult Concepts of key usages and available algorithms.

   Type

   Select whether you want to make new versions of the key available only by import.

   protection

   Select how the key is protected. For now only Software is available.

5. Click on Order fee-based to finally create your key.

6. Wait for your new key to reach the Active state.

STACKIT API

In this case, we will create an AES256 key for symmetric en- and decryption:

curl --header "Content-Type: application/json" \
--header "Authorization: Bearer <access-token>"
--request POST \
--data '{"algorithm":"aes_256_gcm","protection":"software","displayName":"Test AES Key","purpose":"symmetric_encrypt_decrypt"}' \
https://kms.api.eu01.stackit.cloud/v1/projects/<project-id>/regions/<region-id>/keyrings/<keyring-id>/keys

List and view keys

STACKIT Portal

1. On the left bar click on KMS.
2. Navigate to the key ring for which you want to create a key and click on it. Then, on the left bar click on Keys.
3. You see all your keys. To get details of a key, click on its entry.

Alter the version number of a key

STACKIT Portal

1. On the left bar click on KMS.

2. Navigate to the key ring for which you want to create a key and click on it. Then, on the left bar click on Keys.

3. You see all your keys. Navigate to the key for which you want to alter the version.

4. On the menu on the left click on Versions.

5. Import a new key version or let the system create a new key version

   Rotate key (Let the system create a new version)

   On the top bar click on Rotate key. On the new pane click on Order fee-based. Wait for the key to reach the Active state.

   Import a key

   You need a wrapping key to import keys. Read Create and manage wrapping keys on how to achieve this task.

   On the top bar click on Import key version. On the new pane select a wrapping private-public-keypair. Download its public key and encrypt the key you want to import with it. Finally upload the encrypted key from your computer and click on Order fee-based. Wait for the key to reach the Active state.

Delete a key

STACKIT Portal

1. On the left bar click on KMS.
2. Navigate to the key ring for which you want to create a key and click on it. Then, on the left bar click on Keys.
3. You see all your keys. Navigate to the key you want to delete, click on the three-dots-menu and select Schedule deletion.
4. On the new pane enter the name of your key and click on Delete.
5. Your key will be deleted after 30 days.