---
title: "Key Management Service quickstart"
slug: "kms-procedure"
updated: 2026-10-08T06:59:14Z
published: 2026-10-08T06:59:14Z
canonical: "guide.ncloud-docs.com/kms-procedure"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Key Management Service quickstart

Available in Classic and VPC

Key Management Service in NAVER Cloud Platform makes it easy to create, operate, and manage keys. While you can explore the service in detail with [Getting Started with Key Management Service](/docs/en/kms-start) and Using Key Management Service, we recommend starting with this quickstart overview to understand the complete workflow. Understanding the workflow before reviewing the detailed instructions helps you use Key Management Service more effectively. Here's the entire process for using Key Management Service:

[1. Set user permissions](/docs/en/kms-procedure#1%EC%82%AC%EC%9A%A9%EA%B6%8C%ED%95%9C%EC%84%A4%EC%A0%95) [2. Create keys](/docs/en/kms-procedure#2%ED%82%A4%EC%83%9D%EC%84%B1) [3. Manage keys](/docs/en/kms-procedure#3%ED%82%A4%EA%B4%80%EB%A6%AC) [4. Call APIs](/docs/en/kms-procedure#4API%ED%98%B8%EC%B6%9C) [5. Delete keys](/docs/en/kms-procedure#5%ED%82%A4%EC%82%AD%EC%A0%9C)

The Key Management Service workflow closely follows the key lifecycle. For details about the key lifecycle and related terms, see [Using Key Management Service](/docs/en/kms-default-info) and [Key Management Service glossary](/docs/en/kms-glossary).

## 1. Set user permissions

Set permissions for using keys. Define key usage permissions in Key Management Service by assigning policies to sub accounts created in NAVER Cloud Platform's Sub Account. First, create sub accounts in addition to your main account through Sub Account.

              Note

              

Sub Account is a free service with no additional charges. For more information about Sub Account and pricing, see [**Services > Management & Governance > Sub Account**](https://www.ncloud.com/product/management/subAccount) on the NAVER Cloud Platform portal.

You need the appropriate permissions to use Key Management Service features. Manage Key Management Service permissions through Sub Account on NAVER Cloud Platform. Use predefined **system-managed (System Managed) policies** or **user-defined (User Created) policies** that contain permissions you select. To use Key Management Service safely, it is recommended that you configure and manage the minimum number of permissions required to use the service. For detailed instructions on managing permissions, see:

- [Key Management Service permissions management](/docs/en/kms-subaccount)
- [Sub Account user guide](/docs/en/subaccount-overview)

## 2. Create keys

You can create keys. For detailed instructions, see:

- [Using Key Management Service > Create and delete keys](/docs/en/kms-create-delete)

## 3. Manage keys

You can check the list of keys created and proceed with their operation and management. View and change key states throughout their lifecycle, or rotate keys to manage versions. You can also monitor usage history to ensure that issued keys are used appropriately. For detailed instructions, see:

- [Using Key Management Service > Key state management](/docs/en/kms-status)
- [Using Key Management Service > Key version management](/docs/en/kms-version)
- [Using Key Management Service > View key history](/docs/en/kms-activity)

## 4. Call APIs

Use your keys with the REST APIs provided by Key Management Service for encryption, decryption, signing, and signature verification. For detailed instructions, see:

- [Key Management Service API guide](https://api.ncloud-docs.com/docs/en/security-kms)
- [Key Management Service examples](/docs/en/kms-example)
- API credential management precautions and Java SDK download in [Key Management Service prerequisites](/docs/en/kms-spec)

## 5. Delete keys

To prevent misuse and maintain security, you can request deletion of keys you no longer use. After the request is received, the key is automatically deleted following a 72-hour waiting period. If waiting for deletion is not required, immediate deletion is also possible.

              Caution

              

Choose carefully before deleting a key. Deletion is permanent, and you cannot restore the key. When an encryption key is deleted, the encrypted data cannot be decrypted with that key, meaning the deletion of an encryption key results in the loss of encrypted data.

For detailed instructions, see:

- [Using Key Management Service > Create and delete keys](/docs/en/kms-create-delete)