Assigning a key to a File System

Assign a key to a file system using the OCI Console and CLI interface.

    1. Open the navigation menu and click Storage. Under File Storage, click File Systems.
    2. Under List Scope, in the Compartment list, choose the compartment where you want to create a file system that's encrypted with a Vault service master encryption key.
    3. Click Create File System, and then follow the instructions in Creating File Systems.

  • Run the CreateFileSystem and UpdateFileSystem to create and assign a key to a file system.

    For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.

  • Use the fs file-system update command and required parameters to encrypt the file system using the specified key:

    oci fs file-system update --file-system-id <file_system_OCID> --kms-key-id <target_key_id>

    Leave the --kms-key-id value unspecified to use Oracle-managed keys for encryption:

    oci fs file-system update --file-system-id <file_system_OCID> --kms-key-id ""

    For a complete list of parameters and values for CLI commands, see KMS CLI Command Reference.