Docs Home
  • Installation
    • Core Concepts
    • Install Key Manager on Linux
    • Install Key Manager on Kubernetes
      • Install Key Manager on OpenShift
      • Install Key Manager on Upstream Kubernetes
  • Operations
    • Migrate Encryption Keys
    • Monitoring
    • Scaling
      • Scale Key Manager on Linux
      • Scale Key Manager on Upstream Kubernetes
    • Backup and Recovery
    • HSM Key Management
      • HSM Management on Linux
        • Store HSM on Key Manager
        • Store HSM on Hashicorp Vault
      • HSM Management on Kubernetes
        • Store HSM on Key Manager
        • Store HSM on Hashicorp Vault
    • Upgrade
      • Upgrade Key Manager on Linux
      • Upgrade Key Manager on Upstream Kubernetes
  • Administration
    • Enclave Management
    • Identity and Access Management
  • Reference
    • Key Manager Server
      • CLI
        • Cluster Management
          • minkms add
          • minkms backup
          • minkms edit
          • minkms env
          • minkms help
          • minkms logs
          • minkms ls
          • minkms pprof
          • minkms restore
          • minkms rm
          • minkms server
          • minkms stat
        • Enclave Management
          • minkms add-enclave
          • minkms ls-enclave
          • minkms rm-enclave
        • Identity Management
          • minkms add-identity
          • minkms get-identity
          • minkms identity
          • minkms ls-identity
          • minkms rm-identity
        • Key Management
          • minkms add-key
          • minkms decrypt
          • minkms keygen
          • minkms ls-key
          • minkms rm-key
          • minkms stat-key
        • Policy Management
          • minkms add-policy
          • minkms get-policy
          • minkms ls-policy
          • minkms rm-policy
          • minkms set-policy
          • minkms stat-policy
      • Settings
    • Key Manager Operator
      • AIStor Key Manager Helm Chart
      • AIStor Custom Resource Definition (Alpha)
    • Configuration File
  • Legacy Key Management
    • Installation
      • AWS Secrets Manager
      • Azure Key Vault
      • Entrust KeyControl
      • Fortanix SDKMS
      • Google Cloud Secret Manager
      • Hashicorp Vault Keystore
      • Thales CipherTrust Manager (formerly Gemalto KeySecure)
    • Key Encryption Service
      • KES Command Line Interface
        • kes identity
          • kes identity info
          • kes identity new
          • kes identity of
        • kes init
        • kes key
          • kes key create
          • kes key decrypt
          • kes key dek
          • kes key encrypt
          • kes key import
          • kes key info
          • kes key rm
        • kes log
        • kes ls
        • kes metric
        • kes migrate
        • kes policy
          • kes policy assign
          • kes policy create
          • kes policy info
          • kes policy show
        • kes secret
          • kes secret create
          • kes secret info
          • kes secret ls
          • kes secret rm
          • kes secret show
        • kes server
        • kes status
        • kes update
        • Deprecated commands
          • kes identity ls
          • kes key ls
          • kes policy ls
      • Settings
        • KES API
        • KES Environment Variables
  1. Reference
  2. Key Manager Server
  3. CLI
  4. Key Management

Key Management

The minkms binary provides the following CLI commands for performing encryption key management:

Command Description
minkms add-key Create a new key or key version.
minkms rm-key Remove a key or key version.
minkms ls-key List keys or key versions.
minkms stat-key Print key status information.
minkms keygen Generate a new data key.
minkms decrypt Decrypt an encrypted message.

All Rights Reserved 2024-Present, MinIO, Inc.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.