Reference

This section of documentation provides a high level overview of the MinIO KMS binary minkms and its associated commands, parameters, and syntaxes.

You can use the minkms help to view in-shell help information for any given command.

The following tables list the available minkms commands. For usage, run minkms help <command>

Utility Commands

CommandDescription
minkms serverEntry point for starting the MinIO KMS server.
minkms envPrints the environment data for the MinIO KMS server.
minkms identityGenerate or re-compute an identity for use with authentication to the MinIO KMS.
minkms pprofProfile KMS server performance.
minkms logsPrint KMS server logs.
minkms helpPrint help information.
minkms editEdit the cluster configuration.
minkms backupBackup the cluster state.
minkms restoreRestore the cluster state from a backup.

Node Management

CommandDescription
minkms addAdd a node to a cluster.
minkms rmRemove a node from a cluster.
minkms lsList cluster nodes.
minkms statPrint cluster status information.

Key Management

CommandDescription
minkms keygenGenerate a new data key.
minkms decryptDecrypt an encrypted message.
minkms add-keyCreate a new key or key version.
minkms ls-keyList keys or key versions.
minkms stat-keyPrint key status information.
minkms rm-keyRemove a key or key version.

HSM Management

CommandDescription
minkms add-hsmCreate a new HSM.
minkms rm-hsmRemove an HSM.
minkms ls-hsmList HSMs.

Enclave Management

CommandDescription
minkms add-enclaveCreate a new enclave.
minkms rm-enclaveRemove a enclave.
minkms ls-enclaveList enclaves.

Identity Management

CommandDescription
minkms add-identityCreate a new identity.
minkms get-identityPrint an identity.
minkms rm-identityRemove an identity.
minkms ls-identityList identities.

Policy Management

CommandDescription
minkms add-policyCreate or overwrite a policy.
minkms rm-policyRemove a policy.
minkms ls-policyList policies.
minkms stat-policyPrint policy status information.
minkms get-policyPrint a policy.
minkms set-policyAssign a policy to an identity.

On this page