AiStor Object Store Exascale data store for high-performance AI workloads, natively supporting the S3 API for objects, Iceberg for tables, and SFTP for files AiStor Key Manager Highly scalable key management server, for secure encryption at rest AiStor Volume Manager Kubernetes CSI driver and volume manager for direct-attached storage MinIO Warp S3-compatible object store benchmarking tool for measuring throughput and latency MinIO Sidekick High-performance client-side load balancer for distributed HTTP services
  • Installation
    • Core Concepts
    • Install Key Manager on Linux
    • Install Key Manager on Kubernetes
      • Install Key Manager on OpenShift
      • Install Key Manager on Upstream Kubernetes
  • Operations
    • Migrate Encryption Keys
    • Monitoring
    • Scaling
      • Scale Key Manager on Linux
      • Scale Key Manager on Upstream Kubernetes
    • Backup and Recovery
      • Key Manager recovery on Linux
      • Key Manager recovery on Kubernetes
    • HSM Key Management
      • HSM Management on Linux
        • Store HSM on Key Manager
        • Store HSM on Hashicorp Vault
      • HSM Management on Kubernetes
        • Store HSM on Key Manager
        • Store HSM on Hashicorp Vault
    • Upgrade
      • Upgrade Key Manager on Linux
      • Upgrade Key Manager on Upstream Kubernetes
  • Administration
    • Enclave Management
    • Identity Management
    • Access Control
  • Reference
    • Key Manager Server
      • CLI
        • Cluster Management
          • minkms add
          • minkms backup
          • minkms edit
          • minkms env
          • minkms help
          • minkms logs
          • minkms ls
          • minkms pprof
          • minkms restore
          • minkms rm
          • minkms server
          • minkms stat
        • Enclave Management
          • minkms add-enclave
          • minkms ls-enclave
          • minkms rm-enclave
        • Identity Management
          • minkms add-identity
          • minkms get-identity
          • minkms identity
          • minkms ls-identity
          • minkms rm-identity
        • Key Management
          • minkms add-key
          • minkms decrypt
          • minkms keygen
          • minkms ls-key
          • minkms rm-key
          • minkms stat-key
        • Policy Management
          • minkms add-policy
          • minkms get-policy
          • minkms ls-policy
          • minkms rm-policy
          • minkms set-policy
          • minkms stat-policy
      • Settings
    • Key Manager Operator
      • AIStor Key Manager Helm Chart
      • AIStor Custom Resource Definition (Alpha)
    • Configuration File
  • Legacy Key Management
    • Installation
      • AWS Secrets Manager
      • Azure Key Vault
      • Entrust KeyControl
      • Fortanix SDKMS
      • Google Cloud Secret Manager
      • Hashicorp Vault Keystore
      • Thales CipherTrust Manager (formerly Gemalto KeySecure)
    • Key Encryption Service
      • KES Command Line Interface
        • kes identity
          • kes identity info
          • kes identity new
          • kes identity of
        • kes init
        • kes key
          • kes key create
          • kes key decrypt
          • kes key dek
          • kes key encrypt
          • kes key import
          • kes key info
          • kes key rm
        • kes log
        • kes ls
        • kes metric
        • kes migrate
        • kes policy
          • kes policy assign
          • kes policy create
          • kes policy info
          • kes policy show
        • kes secret
          • kes secret create
          • kes secret info
          • kes secret ls
          • kes secret rm
          • kes secret show
        • kes server
        • kes status
        • kes update
        • Deprecated commands
          • kes identity ls
          • kes key ls
          • kes policy ls
      • Settings
        • KES API
        • KES Environment Variables
  1. Reference
  2. Key Manager Server
  3. CLI
  4. Key Management

Key Management

The minkms binary provides the following CLI commands for performing encryption key management:

Command Description
minkms add-key Create a new key or key version.
minkms rm-key Remove a key or key version.
minkms ls-key List keys or key versions.
minkms stat-key Print key status information.
minkms keygen Generate a new data key.
minkms decrypt Decrypt an encrypted message.
Cookie Preferences

All Rights Reserved 2024-Present, MinIO, Inc.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.