kes key


The :mc:kes key command creates, utilizes, displays, and deletes cryptographic keys (Secrets) through the MinIO Key Encryption Service (KES). KES stores created secrets on the configured Key Management System (KMS) target.

You can also use these commands to encrypt/decrypt messages or generate new data encryption keys.

This set of pages provides reference information for the kes key commands.


Subcommands Description
create Create a new cryptographic key
import Import a cryptographic key
info Output information about a cryptographic key
ls List cryptographic keys
rm Delete a cryptographic key
encrypt Encrypt a message
decrypt Decrypt an encrypted message
dek Generate a new data encryption key