Key creation and deletion

Available in Classic and VPC

Create keys

You can generate an unlimited number of user-managed keys. However, caution is needed as charges are incurred based on the number of keys created. To create a key, follow these steps:

1. In the NAVER Cloud Platform console, navigate to > Services > Security > Key Management Service > Key.
2. Click the [Create keys] button.
3. When the Create keys page appears, enter the required information.

• Key name: enter between 3 and 15 characters using a combination of letters, numbers, hyphens, and underscores. However, it must start with a letter and cannot be duplicated by another key name in your key store.
• Boundary: select either Global or Isolated

• Usage: click to select between encryption/decryption (AES-256), encryption/decryption and signing/validation (RSA-2048), and signing/verification (ECDSA).
• Encryption type: if you selected encryption/decryption (AES-256) in usage, click whether to apply convergent encryption, which always generates the same ciphertext for identical plaintext. If you select convergent encryption, the Context parameter is required when calling the encryption/decryption feature.

• Rotation type: click automatic rotation status.
• Rotation cycle: enter between 1 and 730 days (default: 90 days)
• Memo: enter 100 characters or less

4. Click the [Create keys] button.

Delete keys

You can request deletion of a key that is no longer in use. Keys requested for deletion are permanently deleted after a 72-hour waiting period. Keys requested for deletion are placed in a pending deletion status and are not available for encryption/decryption requests, just like in a disabled status. If deletion waiting period is not needed, it is also possible to delete it immediately. For example, if the key doesn't have a user, it can be deleted immediately without waiting 72 hours because deleting it won't cause any data loss.

To cancel a deletion request for a key that is pending deletion, click the [Cancel key deletion] button before the 72-hour waiting period has elapsed. After clicking the button, the deletion request is canceled and the key is immediately placed in the disabled status. If you want to use the key again, you can switch it to enabled status.
To delete a key, follow these steps:

1. In the NAVER Cloud Platform console, navigate to > Services > Security > Key Management Service > Key.
2. Click to select the keys you want to delete, then click the [Request key deletion] button.
3. When the Request key deletion popup window appears, click the [Request deletion] button. Caution is needed when deleting a key that has usage history. (Recent usage history refers to APIs usage history.)
   
4. Check the key status that changed after the deletion request in the key list.
   • Pending deletion: a deletion request has been received and is waiting 72 hours for complete deletion.
5. If you want to delete the key immediately without deleting it on the scheduled deletion date shown in the status field, click the [Delete now] button.