Create and manage wrapping keys

Wrapping keys are used to safely import key material into the KMS. They are short-lived and must be created using the same protection as the key into which the material is imported. A wrapping key expires after one day.

Prerequisites

• You have a key ring: Create and manage key rings

Create a wrapping key

STACKIT Portal

1. On the left bar click on KMS.

2. Navigate to the key ring for which you want to create a key and click on it. Then, on the left bar click on Wrapping keys.

3. On the top bar click on Create Wrapping key.

4. Fill in the needed information:

   Wrapping key name

   Enter a key name of your choice. You can’t change it afterwards.

   Description

   Optionally enter a description of your choice.

   Purpose and Algorithm

   Specify the intented usage of the wrapping key and a key algorithm. Consult Concepts of wrapping key usages and available algorithms.

   Protection

   Select how the key is protected. For now only Software is available.

5. Click on Create to finally create your key.

6. Wait for your new wrapping key to reach the Active state.

List and view wrapping keys

STACKIT Portal

1. On the left bar click on KMS.
2. Navigate to the key ring for which you want to create a wrapping key and click on it. Then, on the left bar click on Wrapping keys.
3. You see all your wrapping keys. To get details of a key, click on its entry.

Delete a wrapping key

STACKIT Portal

1. On the left bar click on KMS.
2. Navigate to the key ring for which you want to create a key and click on it. Then, on the left bar click on Wrapping keys.
3. You see all your wrapping keys. Navigate to the key you want to delete, click on the three-dots-menu and select Delete.
4. On the new pane enter the name of your key and click on Delete.
5. Your key will be deleted immediately.