Skip to main content
After you delete a key in Key Management Service (KMS), you can no longer use it for cryptographic operations. A deleted key is retained for 30 days. During that period, you can restore the key. Otherwise, the key is permanently removed after 30 days.

​
Prerequisites

Make sure you are in a group that has at least the editor role within your tenant or project; for example, the default editors group. Alternatively, you can have an access permit with the editor role assigned to the required key. To check your access rights, go to the Administration → IAM section in the web console.

​
How to delete a key

  1. In the web console, go to Cryptography → KMS.
  2. Select filters:
    • Active
    • Symmetric keys or Asymmetric keys
  3. In the line of the required key, click → Delete.
  4. In the window that opens, confirm the deletion.
  5. Click Delete key.
The key appears in the list of deleted keys.

​
How to restore a key

You can restore keys up to 30 days after their deletion.
  1. In the web console, go to Cryptography → KMS.
  2. Select filters:
    • Deleted
    • Symmetric keys or Asymmetric keys
  3. In the line of the required key, click Restore.
  4. In the window that opens, confirm the restoration.
The key appears in the list of active keys and becomes available for cryptographic operations.