Disable Keys

You can disable specified customer master keys (CMKs) to protect data in an emergency.

Before you begin

  1. You have created a CMK. For more information, see Create Keys.
  2. The CMK to be disabled is in the ENABLE status.

About this task

If you successfully created a CMK, it is in the ENABLE status by default. You can disable a CMK that is temporarily not in use according to your needs. You cannot encrypt and decrypt data with a disabled CMK unless it is re-enabled.

Apart from disabling keys, you can also delete keys that are no longer in use. For more information, see Schedule Key Deletion.

Important:

You are charged for a disabled key. Only when the key is in the PENDING_DELETE status after you schedule key deletion will the billing stop.

Procedure

  1. Log in to the Key Management Service Console .
  2. In the left navigation pane, click Keys > Customer managed keys.
  3. On the Customer management key page, find the ID of the key to be disabled. Click Disable Key in the Actions column.

Results

You will see a SUCCESS message. The clickable button turns from Disable Key to Enable Key. Click Enable Key if you want to re-enable the key.

Did the above content solve your problem? Yes No
Please complete information!

Call us

400-151-8800

Email us

cloud@pingan.com

Online customer service

Instant reply

Technical Support

cloud products