> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to rotate symmetric keys in Key Management Service

When you [create a symmetric key](/kms/manage/create#how-to-create-a-symmetric-key), you can configure a rotation period to [rotate key material](/kms/types-operations#key-rotation) periodically, but you can also rotate a symmetric key manually. Rotation helps you refresh the cryptographic material behind the key and create a new key version while you continue using the same key resource.

## Prerequisites

Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. Alternatively, you can have an [access permit](/iam/authorization/groups/manage#setting-up-custom-groups) with the `editor` role assigned to the required key. To check your access rights, go to the [Administration → IAM](https://console.nebius.com/iam) section in the web console.

## How to rotate a symmetric key manually

<Tabs group="interfaces">
  <Tab title="Web console">
    1. In the [web console](https://console.nebius.com), go to <Icon icon="https://mintcdn.com/nebius-ai-cloud/BhI64Dlym_yJl7Yy/_assets/sidebar/cryptography.svg?fit=max&auto=format&n=BhI64Dlym_yJl7Yy&q=85&s=e2af8c31917650f2951761ab265dd9b9" width="14" height="16" data-path="_assets/sidebar/cryptography.svg" /> **Cryptography** → **KMS**.
    2. Make sure that **Symmetric keys** and **Active** are selected in the filters.
    3. In the line of the required key, click <Icon icon="https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/button-vellipsis.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e80b8e57c43bfd117679262e6a1334ad" width="12" height="24" data-path="_assets/button-vellipsis.svg" /> → **Rotate**.
  </Tab>

  <Tab title="CLI">
    1. List symmetric keys:

       ```bash theme={null}
       nebius kms symmetric-key list
       ```

       In the output, copy the ID of the required symmetric key.

    2. Rotate the key:

       ```bash theme={null}
       nebius kms symmetric-key rotate <key_ID>
       ```

       In the command, specify the ID of the symmetric key.

       The output looks like the following:

       ```yaml theme={null}
       metadata:
         id: kmssymkey-e00***
         parent_id: project-e00***
         name: my-symmetric-key
         resource_version: "2"
         created_at: "2026-05-07T10:18:49.623048Z"
         updated_at: "2026-05-07T10:21:17.384632Z"
       spec:
         description: test-key
         algorithm: AES_256
         rotation_period: 0s
       status:
         state: ACTIVE
       ```

       Each time you rotate a key, the `resource_version` value increases by one.
  </Tab>
</Tabs>