tencent cloud

All product documents
Key Management Service
Last updated: 2025-02-06 15:19:27
FAQs
Last updated: 2025-02-06 15:19:27

Is there a limit on the number of CMKs that can be created in KMS?

Yes. Up to 200 CMKs can be created under each account in each region, excluding the ones scheduled for deletion and Tencent Cloud managed CMKs. If you need to create more CMKs, please submit a ticket or contact your Tencent Cloud sales rep.

Which Tencent Cloud services can encrypt data using KMS?

KMS is seamlessly integrated with Tencent Cloud services such as TencentDB, COS, and CBS to encrypt their data through envelope encryption.

How do I encrypt data using KMS?

There are three ways to call KMS:
Call KMS through KMS API. In this case, your business applications can be either in or outside Tencent Cloud.
Call KMS by integrating the KMS SDK into your own business application. In this case, your business applications can be either in or outside Tencent Cloud.
Call KMS through a Tencent Cloud product that has been connected to KMS to encrypt and decrypt the data of the product.

How do I enable key rotation?

You can enable key rotation in the KMS Console to automatically rotate CMK annually.
After a CMK is rotated, you do not need to encrypt the data again, as Tencent Cloud will retain the original CMK. Ciphertext encrypted with the old CMK can still be decrypted, while new data will be encrypted with the new CMK.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 available.

7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon