evroc kms keys import

Import a new key

Synopsis

Import a new key.

Imports key material to a key that is pending import. The key must have been created to be imported.

The plaintext key material never leaves the machine where this command is run. Importing works by generating an ephemeral data key that is used to wrap the key material that is to be imported. The data key is then wrapped by the public key stated on the Key to be imported. The wrapped data key and the wrapped key material is sent to the KMS, which then internally decrypts and imports the key material.

In order to rotate a key that was imported, see the "import-rotate" command.

evroc kms keys import <key_id> [flags]

Options

  -h, --help          help for import
      --path string   Path to the raw key material to be imported.

Options inherited from parent commands

      --config string   Path to the evroc config file (default "~/.evroc/config.yaml")

SEE ALSO