> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to update keys in Key Management Service

You can update the name and description of [symmetric and asymmetric keys](/kms/types-operations#symmetric-and-asymmetric-keys) in Key Management Service (KMS). For symmetric keys, you can also update the key rotation period. You can't update the algorithm of an existing key. [Create a new key](/kms/manage/create) if you need to use a different algorithm.

## Prerequisites

Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. Alternatively, you can have an [access permit](/iam/authorization/groups/manage#setting-up-custom-groups) with the `editor` role assigned to the required key. To check your access rights, go to the [Administration → IAM](https://console.nebius.com/iam) section in the web console.

## How to update a symmetric key

<Tabs group="interfaces">
  <Tab title="Web console">
    1. In the [web console](https://console.nebius.com), go to <Icon icon="https://mintcdn.com/nebius-ai-cloud/BhI64Dlym_yJl7Yy/_assets/sidebar/cryptography.svg?fit=max&auto=format&n=BhI64Dlym_yJl7Yy&q=85&s=e2af8c31917650f2951761ab265dd9b9" width="14" height="16" data-path="_assets/sidebar/cryptography.svg" /> **Cryptography** → **KMS**.

    2. Make sure that **Symmetric keys** and **Active** are selected in the filters.

    3. In the line of the required key, click <Icon icon="https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/button-vellipsis.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e80b8e57c43bfd117679262e6a1334ad" width="12" height="24" data-path="_assets/button-vellipsis.svg" /> → **Settings**.

    4. Update the key settings:

       * **Name**: New key name.
       * **Rotation period**: New period after which KMS automatically [rotates the key material](/kms/types-operations#key-rotation). When a key is rotated, KMS generates a new key version and immediately sets it as the default version.
       * **Description**: New key description.

    5. Click **Save changes**.
  </Tab>

  <Tab title="CLI">
    1. List symmetric keys:

       ```bash theme={null}
       nebius kms symmetric-key list
       ```

       In the output, copy the ID of the required symmetric key.

    2. Update the key:

       ```bash theme={null}
       nebius kms symmetric-key update \
          --id <symmetric_key_ID> \
          --name <new_key_name> \
          --description "<new_key_description>" \
          --rotation-period <new_period>
       ```

       The command contains the following parameters:

       * `--id`: ID of the symmetric key that you update.
       * `--name` (optional): New name of the key.
       * `--description` (optional): New description of the key.
       * `--rotation-period` (optional): New period after which KMS automatically [rotates the key material](/kms/types-operations#key-rotation).

         When a key is rotated, KMS generates a new key version and immediately sets it as the default version.

         Specify the value in the `NhNmNs` format, for example, `24h` or `48h30m10s`. The minimum value is `86400s` (one day) and the maximum value is `315360000s` (3650 days). The default value is `7776000s` (90 days).
  </Tab>
</Tabs>

## How to update an asymmetric key

<Tabs group="interfaces">
  <Tab title="Web console">
    1. In the [web console](https://console.nebius.com), go to <Icon icon="https://mintcdn.com/nebius-ai-cloud/BhI64Dlym_yJl7Yy/_assets/sidebar/cryptography.svg?fit=max&auto=format&n=BhI64Dlym_yJl7Yy&q=85&s=e2af8c31917650f2951761ab265dd9b9" width="14" height="16" data-path="_assets/sidebar/cryptography.svg" /> **Cryptography** → **KMS**.

    2. Make sure that **Asymmetric keys** and **Active** are selected in the filters.

    3. In the line of the required key, click <Icon icon="https://mintcdn.com/nebius-ai-cloud/1Ha0sWR6e1mnIaHS/_assets/button-vellipsis.svg?fit=max&auto=format&n=1Ha0sWR6e1mnIaHS&q=85&s=e80b8e57c43bfd117679262e6a1334ad" width="12" height="24" data-path="_assets/button-vellipsis.svg" /> → **Settings**.

    4. Update the key settings:

       * **Name**: New key name.
       * **Description**: New key description.

    5. Click **Save changes**.
  </Tab>

  <Tab title="CLI">
    1. List asymmetric keys:

       ```bash theme={null}
       nebius kms asymmetric-key list
       ```

       In the output, copy the ID of the required asymmetric key.

    2. Update the key:

       ```bash theme={null}
       nebius kms asymmetric-key update \
          --id <asymmetric_key_ID> \
          --name <new_key_name> \
          --description "<new_key_description>"
       ```

       The command contains the following parameters:

       * `--id`: ID of the asymmetric key that you update.
       * `--name` (optional): New name of the key.
       * `--description` (optional): New description of the key.
  </Tab>
</Tabs>

## See also

* [Cryptographic operations with symmetric keys](/kms/cryptography/symmetric)
* [Cryptographic operations with asymmetric keys](/kms/cryptography/asymmetric)