Canceling a Master Encryption Key Deletion

Learn how to cancel the scheduled deletion of a master encryption key in an OCI vault.

• Console
• CLI
• API

• Tip
  
  You can cancel the deletion of a key only when it is in a Pending Deletion state.

  1. Open the navigation menu , select Identity & Security, and then select Vault.
  2. Under List scope, select a compartment that contains the master encryption key that you want to cancel its deletion.
  3. On the Vaults page, select the name of the vault to open its details page.
  4. Under Resources, select Master Encryption Key and select the name of key to open its details page.
  5. Select Cancel Deletion.
  6. To confirm that you want to cancel deletion of the key, select Cancel Deletion.

     Access to the key and any resources or data encrypted by the key are restored when the key is again in Enabled state.

• Tip
  
  You can only cancel the deletion of a key that's in a Pending Deletion state.

  Open a command prompt and run oci kms management key cancel-deletion to cancel a key's scheduled deletion:

  oci kms management key cancel-deletion --key-id <target_key_id> --endpoint <control_plane_url>

  For example:

  
  oci kms management key cancel-deletion --key-id ocid1.key.region1.sea.exampleaaacu2.examplesmtpsuqmoy4m5cvblugmizcoeu2nfc6b3zfaux2lmqz245gezevsq --endpoint https://exampleaaacu2-management.kms.us-ashburn-1.oraclecloud.com

  For a complete list of parameters and values for CLI commands, see KMS CLI Command Reference.

• Run the CancelKeyDeletion operation to cancel the deletion of a vault key using the KMSMANAGMENT endpoint.

  Note
  
  Each region uses the KMSMANAGMENT endpoint for managing keys. This endpoint is referred to as the control plane URL or vault management endpoint. For regional endpoints, see the API Documentation.

  For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.