Learn the "why" behind slow queries and how to fix them in our 2-Part Webinar.
Register now >
Docs Menu
Docs Home
/ /

Rotate Master KMIP Keys

Most regulatory requirements mandate that a managed key used to decrypt sensitive data must be rotated out and replaced with a new key once a year. Cloud Manager provides the option to rotate the master KMIP key.

Important

Setting kmipKeyIdentifier in the deployment's advanced options disables the Rotate the KMIP Master Key option. To use this procedure, first clear kmipKeyIdentifier from the deployment's advanced options or rotate the key manually.

1
  1. If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.

  2. If it's not already displayed, select your desired project from the Projects menu in the navigation bar.

  3. In the sidebar, click Processes under the Database heading.

The Processes page displays.

2
3

In the card for the deployment:

  1. Click

  2. Select Rotate the KMIP Master Key.

  3. Click Rotate Key.

4

Cloud Manager displays your proposed changes.

  1. If you are satisfied, click Confirm & Deploy.

  2. If you want to make further configuration changes, click Cancel. Click Modify for the cluster to make additional changes.

Back

Encrypt Snapshots