Assigning a Key to a Boot Volume
Assigning a key to a boot volume using the OCI Console and CLI interface.
- Open the navigation menu and click Storage. Under Block Storage, click Block Volumes. In the Block Storage menu on the sidebar, click Boot Volumes.
- Under List Scope, in the Compartment list, choose the compartment that contains the boot volume that you want to encrypt with a Vault service master encryption key.
- From the list of volumes, click the volume name.
Do one of the following:
- If the volume already has a key assigned to it, next to Encryption Key, click Edit to assign a different key.
- If the volume does not already have a key assigned to it, next to Encryption Key, click Assign.
Choose the vault compartment, vault, key compartment, and key.
When you are finished, click Assign or Update, as appropriate.
Open a command prompt and run
oci bv boot-volume-kms-key updateto assign a new Vault service master encryption key to an existing boot volume:
oci bv boot-volume-kms-key update --boot-volume-id <target_bootvolume_id> --kms-key-id <new_key_id>
oci bv boot-volume-kms-key update --boot-volume-id ocid1.bootvolume.oc1.sea.exampless6hvjs6j6mqwcdv4gfzhtanon3fsqyviqeh522be6wv7x7abz7pq --kms-key-id ocid1.key.region1.sea.exampleaaacu2.examplesmtpsuqmoy4m5cvblugmizcoeu2nfc6b3zfaux2lmqz245gezevsq
For a complete list of parameters and values for CLI commands, see KMS CLI Command Reference.