KES Command Line Interface

Quickstart

The KES server and CLI is available as a single binary, container image or can be build from source.

Binary Downloads

Binary Releases

Download the binary for your OS and system architecture.

You can also verify the binary with minisign by downloading the corresponding .minisig signature file. Then run:

minisign -Vm kes-<OS>-<ARCH> -P RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav

Docker

Pull the latest release via:

docker pull minio/kes

Homebrew Source

After obtaining the binary, run it from the terminal with any of the available commands.

Command	Description
Start
`init`	Initialize a stateful KES server or cluster
`server`	Start a KES server
Manage
`enclave`	Manage KES enclaves
`identity`	Manage KES identities
`key`	Manage cryptographic keys
`policy`	Manage KES policies
`secret`	Manage KES secrets
Audit
`log`	Print error and audit log events
`metric`	Print server metrics
`status`	Print server status
Administer
`migrate`	Migrate KMS data
`update`	Update KES binary