yexinru/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
Files
main
doc-exports/docs/kms/umn/dew_01_0030.html
qinweiwei 3e4721c813 KMS UMN 20251111 version 
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: qinweiwei <qinweiwei@huawei.com>
Co-committed-by: qinweiwei <qinweiwei@huawei.com>
2026-01-19 09:05:54 +00:00

3.1 KiB
Raw Permalink Blame History

Disabling a Key

This section describes how to use the KMS console to disable one or more custom keys, thereby protecting data in urgent cases.

After being disabled, a custom key cannot be used to encrypt or decrypt any data. Before using a disabled key to encrypt or decrypt data, you must enable it by following instructions in Enabling a Key.

Prerequisites

The key you want to disable is in Enabled status.

Constraints

  • Default keys created by KMS cannot be disabled.
  • A disabled key is still billable. It will stop incurring charges if it is deleted.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click on the left and choose Security > Key Management Service.
  4. Locate the target key in the list and click Disable in the Operation column.
  5. In the displayed dialog box, select I understand the impact of disabling keys, and click OK.

    To disable multiple keys at a time, select them and click Disable in the upper left corner of the list.

Parent topic: Managing CMKs