Skip to content

stackit_kms_wrapping-key_create.md

Latest commit

 

History

History
49 lines (35 loc) · 2.2 KB

stackit_kms_wrapping-key_create.md

File metadata and controls

49 lines (35 loc) · 2.2 KB
Raw

stackit kms wrapping-key create

Creates a KMS wrapping key

Synopsis

Creates a KMS wrapping key.

stackit kms wrapping-key create [flags]

Examples

  Create a symmetric (RSA + AES) KMS wrapping key with name "my-wrapping-key-name" in key ring with ID "my-keyring-id"
  $ stackit kms wrapping-key create --keyring-id "my-keyring-id" --algorithm "rsa_2048_oaep_sha256_aes_256_key_wrap" --name "my-wrapping-key-name" --purpose "wrap_symmetric_key" --protection "software"

  Create an asymmetric (RSA) KMS wrapping key with name "my-wrapping-key-name" in key ring with ID "my-keyring-id"
  $ stackit kms wrapping-key create --keyring-id "my-keyring-id" --algorithm "rsa_3072_oaep_sha256" --name "my-wrapping-key-name" --purpose "wrap_asymmetric_key" --protection "software"

Options

      --algorithm string     En-/Decryption / signing algorithm. (one of: [rsa_2048_oaep_sha256, rsa_3072_oaep_sha256, rsa_4096_oaep_sha256, rsa_4096_oaep_sha512, rsa_2048_oaep_sha256_aes_256_key_wrap, rsa_3072_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha512_aes_256_key_wrap])
      --description string   Optional description of the wrapping key
  -h, --help                 Help for "stackit kms wrapping-key create"
      --keyring-id string    ID of the KMS key ring
      --name string          The display name to distinguish multiple wrapping keys
      --protection string    The underlying system that is responsible for protecting the key material. (one of: [software])
      --purpose string       Purpose of the key. (one of: [wrap_symmetric_key, wrap_asymmetric_key])

Options inherited from parent commands

  -y, --assume-yes             If set, skips all confirmation prompts
      --async                  If set, runs the command asynchronously
  -o, --output-format string   Output format, (one of: [json, pretty, none, yaml])
  -p, --project-id string      Project ID
      --region string          Target region for region-specific requests
      --verbosity string       Verbosity of the CLI, (one of: [debug, info, warning, error]) (default "info")

SEE ALSO