diff --git a/pages/key-manager/faq.mdx b/pages/key-manager/faq.mdx
index bd53741979..810e597ba8 100644
--- a/pages/key-manager/faq.mdx
+++ b/pages/key-manager/faq.mdx
@@ -2,7 +2,7 @@
title: Key Manager
description: Explore Scaleway Key Manager with our comprehensive FAQ covering security, key types, and more.
dates:
- validation: 2025-07-24
+ validation: 2025-08-28
productIcon: KmsProductIcon
---
@@ -22,7 +22,7 @@ Read our [dedicated documentation](/key-manager/reference-content/understanding-
## Which cryptographic operations does Key Manager support?
-Key Manager supports the three following cryptographic operations:
+Key Manager supports the following cryptographic operations:
- [Encryption](/key-manager/concepts/#encryption)
- [Decryption](/key-manager/concepts/#decryption)
@@ -50,3 +50,9 @@ When you delete a key, it is scheduled for deletion. This lets you mark a key an
During this time, you can read your key version but cannot edit, access, or delete it. After the retention period, the key and its version are permanently deleted.
Recovering keys [scheduled for deletion](/key-manager/concepts/#scheduled-deletion) is billed €0.01 per key.
+
+## How is Key Manager billed?
+
+- Symmeric and asymmetric key storage is billed €0.04 per key version monthly.
+- Symmeric and asymmetric key operation is billed €0.03 per 10,000 requests.
+- Restoring a key scheduled for deletion is billed €0.01 per key.
\ No newline at end of file
diff --git a/pages/key-manager/how-to/create-km-key.mdx b/pages/key-manager/how-to/create-km-key.mdx
index be69819f6d..82d9bb432f 100644
--- a/pages/key-manager/how-to/create-km-key.mdx
+++ b/pages/key-manager/how-to/create-km-key.mdx
@@ -3,7 +3,7 @@ title: Create a Key Manager key
description: Discover how to create a key from the Scaleway console to decrypt your data using Scaleway's Key Manager.
tags: key-manager encryption data key
dates:
- validation: 2025-08-11
+ validation: 2025-08-27
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
@@ -18,7 +18,7 @@ Scaleway's Key Manager allows you to create key encryption keys from the [Scalew
## How to create a Key Manager key
-1. Click **Key Manager** in the **Security and Identity section** of the [Scaleway console](https://console.scaleway.com) side menu.
+1. Click **Key Manager** in the **Security & Identity** section of the [Scaleway console](https://console.scaleway.com) side menu.
2. Click **+ Create key**.
3. Choose the region in which you want to create your key.
4. Enter a name, a description, and optional tags for your key.
@@ -30,4 +30,4 @@ Scaleway's Key Manager allows you to create key encryption keys from the [Scalew
Key protection allows you to protect your key from accidental deletion.
-7. Click **Create key**. Your key's **Overview** page displays.
+7. Check the estimated cost, then click **Create key**. Your key's **Overview** page displays.
diff --git a/pages/key-manager/how-to/create-manage-dek.mdx b/pages/key-manager/how-to/create-manage-dek.mdx
index dcfb38240e..1988162d5b 100644
--- a/pages/key-manager/how-to/create-manage-dek.mdx
+++ b/pages/key-manager/how-to/create-manage-dek.mdx
@@ -3,7 +3,7 @@ title: Create and manage a Key Manager data encryption key
description: Discover how to create a data encryption key from the Scaleway console to encrypt and decrypt your payloads using Scaleway's Key Manager.
tags: key-manager data-encryption-key data key payload encryption
dates:
- validation: 2025-08-11
+ validation: 2025-08-28
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
@@ -26,7 +26,7 @@ You can then use your Key Manager key to encrypt your DEK.
## How to create and manage a data encryption key (DEK)
-1. Click Key Manager in the **Security and Identity section** of the [Scaleway console](https://console.scaleway.com) side menu. Your keys display.
+1. Click Key Manager in the **Security & Identity** section of the [Scaleway console](https://console.scaleway.com) side menu. Your keys display.
2. Click the key for which to create a data encryption key.
3. Scroll down to the **Create data encryption key** section.
4. Click **Create data encryption key**. A pop-up displays with the [ciphertext](/key-manager/concepts/#ciphertext) of your DEK.
diff --git a/pages/key-manager/how-to/delete-km-keys.mdx b/pages/key-manager/how-to/delete-km-keys.mdx
index 74f5db3534..3e28f38ba1 100644
--- a/pages/key-manager/how-to/delete-km-keys.mdx
+++ b/pages/key-manager/how-to/delete-km-keys.mdx
@@ -3,7 +3,7 @@ title: Schedule a Key Manager key deletion
description: Discover how to delete a Key Manager key from the Scaleway console.
tags: key-manager delete key
dates:
- validation: 2025-07-24
+ validation: 2025-08-28
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
diff --git a/pages/key-manager/how-to/rotate-kem-keys.mdx b/pages/key-manager/how-to/rotate-kem-keys.mdx
index 666a84306c..a1b34f8f95 100644
--- a/pages/key-manager/how-to/rotate-kem-keys.mdx
+++ b/pages/key-manager/how-to/rotate-kem-keys.mdx
@@ -3,7 +3,7 @@ title: Rotate keys using the Scaleway console
description: Discover how to rotate a key from the Scaleway console to decrypt your data using Scaleway's Key Manager.
tags: key-manager rotation key-version
dates:
- validation: 2025-08-11
+ validation: 2025-08-28
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
@@ -13,6 +13,8 @@ Key rotation is a critical security practice that ensures that encryption keys a
This reduces the risk of exposure if a key is compromised, thus enhancing the overall security and resilience of your system. For symmetric encryption, it is generally recommended to rotate keys every 30 to 90 days.
+Note that you **cannot rotate keys with a usage set to asymmetric encryption and/or signature**.
+
- A Scaleway account logged into the [console](https://console.scaleway.com)