Skip to main content
You can update the name and description of symmetric and asymmetric keys in Key Management Service (KMS). For symmetric keys, you can also update the key rotation period. You can’t update the algorithm of an existing key. Create a new key if you need to use a different algorithm.

​
Prerequisites

Make sure you are in a group that has at least the editor role within your tenant or project; for example, the default editors group. Alternatively, you can have an access permit with the editor role assigned to the required key. To check your access rights, go to the Administration → IAM section in the web console.

​
How to update a symmetric key

  1. List symmetric keys: 
    nebius kms symmetric-key list
    In the output, copy the ID of the required symmetric key.
  2. Update the key: 
    nebius kms symmetric-key update \
   --id <symmetric_key_ID> \
   --name <new_key_name> \
   --description "<new_key_description>" \
   --rotation-period <new_period>
    The command contains the following parameters:
    • --id: ID of the symmetric key that you update.
    • --name (optional): New name of the key.
    • --description (optional): New description of the key.
    • --rotation-period (optional): New period after which KMS automatically rotates the key material. When a key is rotated, KMS generates a new key version and immediately sets it as the default version. Specify the value in the NhNmNs format, for example, 24h or 48h30m10s. The minimum value is 86400s (one day) and the maximum value is 315360000s (3650 days). The default value is 7776000s (90 days).

​
How to update an asymmetric key

  1. List asymmetric keys: 
    nebius kms asymmetric-key list
    In the output, copy the ID of the required asymmetric key.
  2. Update the key: 
    nebius kms asymmetric-key update \
   --id <asymmetric_key_ID> \
   --name <new_key_name> \
   --description "<new_key_description>"
    The command contains the following parameters:
    • --id: ID of the asymmetric key that you update.
    • --name (optional): New name of the key.
    • --description (optional): New description of the key.