Post

/clusters/rotate_master_encryption_group_key/

This endpoint rotates the master encryption group key, if encryption is enabled with encryption type CIPHER_TRUST_KMIP, in which encryption keys are managed externally on Thales Group CipherTrust Data Security Platform. This command generates a new version of the master key. The master key is used by the cluster to encrypt the data encryption keys when they are retrieved from the EKM and distributed by the cluster node that hosts the encryption service client to other cluster nodes. The master key is generated by the cluster and should not be rotated from the EKM itself.

Security

HTTP

Type basic

Basic authentication using VMS user name and password

API Key: ApiToken

Header parameter nameApiToken

Send current valid API token in an Authorization header with format Api-Token .

Responses

204

Master encryption group key was rotated successfully.

409

The request could not be completed due to a conflict with the current state.

object

detail

string

ExampleMaster encryption group was not found by its crn <MASTER_KEY_ENCRYPTION_GROUP_CRN>.

503

Service temporarily unavailable, try again later.

object

detail

string

ExampleFailed to rotate encryption group key.

Rotate master encryption group key