Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions pages/key-manager/faq.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: Key Manager
description: Explore Scaleway Key Manager with our comprehensive FAQ covering security, key types, and more.
dates:
validation: 2025-07-24
validation: 2025-08-28
productIcon: KmsProductIcon
---

Expand All @@ -22,7 +22,7 @@ Read our [dedicated documentation](/key-manager/reference-content/understanding-

## Which cryptographic operations does Key Manager support?

Key Manager supports the three following cryptographic operations:
Key Manager supports the following cryptographic operations:

- [Encryption](/key-manager/concepts/#encryption)
- [Decryption](/key-manager/concepts/#decryption)
Expand Down Expand Up @@ -50,3 +50,9 @@ When you delete a key, it is scheduled for deletion. This lets you mark a key an
During this time, you can read your key version but cannot edit, access, or delete it. After the retention period, the key and its version are permanently deleted.

Recovering keys [scheduled for deletion](/key-manager/concepts/#scheduled-deletion) is billed €0.01 per key.

## How is Key Manager billed?

- Symmeric and asymmetric key storage is billed €0.04 per key version monthly.
- Symmeric and asymmetric key operation is billed €0.03 per 10,000 requests.
- Restoring a key scheduled for deletion is billed €0.01 per key.
6 changes: 3 additions & 3 deletions pages/key-manager/how-to/create-km-key.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Create a Key Manager key
description: Discover how to create a key from the Scaleway console to decrypt your data using Scaleway's Key Manager.
tags: key-manager encryption data key
dates:
validation: 2025-08-11
validation: 2025-08-27
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
Expand All @@ -18,7 +18,7 @@ Scaleway's Key Manager allows you to create key encryption keys from the [Scalew

## How to create a Key Manager key

1. Click **Key Manager** in the **Security and Identity section** of the [Scaleway console](https://console.scaleway.com) side menu.
1. Click **Key Manager** in the **Security & Identity** section of the [Scaleway console](https://console.scaleway.com) side menu.
2. Click **+ Create key**.
3. Choose the region in which you want to create your key.
4. Enter a name, a description, and optional tags for your key.
Expand All @@ -30,4 +30,4 @@ Scaleway's Key Manager allows you to create key encryption keys from the [Scalew
<Message type="note">
Key protection allows you to protect your key from accidental deletion.
</Message>
7. Click **Create key**. Your key's **Overview** page displays.
7. Check the estimated cost, then click **Create key**. Your key's **Overview** page displays.
4 changes: 2 additions & 2 deletions pages/key-manager/how-to/create-manage-dek.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Create and manage a Key Manager data encryption key
description: Discover how to create a data encryption key from the Scaleway console to encrypt and decrypt your payloads using Scaleway's Key Manager.
tags: key-manager data-encryption-key data key payload encryption
dates:
validation: 2025-08-11
validation: 2025-08-28
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
Expand All @@ -26,7 +26,7 @@ You can then use your Key Manager key to encrypt your DEK.

## How to create and manage a data encryption key (DEK)

1. Click Key Manager in the **Security and Identity section** of the [Scaleway console](https://console.scaleway.com) side menu. Your keys display.
1. Click Key Manager in the **Security & Identity** section of the [Scaleway console](https://console.scaleway.com) side menu. Your keys display.
2. Click the key for which to create a data encryption key.
3. Scroll down to the **Create data encryption key** section.
4. Click **Create data encryption key**. A pop-up displays with the [ciphertext](/key-manager/concepts/#ciphertext) of your DEK.
Expand Down
2 changes: 1 addition & 1 deletion pages/key-manager/how-to/delete-km-keys.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Schedule a Key Manager key deletion
description: Discover how to delete a Key Manager key from the Scaleway console.
tags: key-manager delete key
dates:
validation: 2025-07-24
validation: 2025-08-28
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
Expand Down
4 changes: 3 additions & 1 deletion pages/key-manager/how-to/rotate-kem-keys.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Rotate keys using the Scaleway console
description: Discover how to rotate a key from the Scaleway console to decrypt your data using Scaleway's Key Manager.
tags: key-manager rotation key-version
dates:
validation: 2025-08-11
validation: 2025-08-28
posted: 2025-02-06
---
import Requirements from '@macros/iam/requirements.mdx'
Expand All @@ -13,6 +13,8 @@ Key rotation is a critical security practice that ensures that encryption keys a

This reduces the risk of exposure if a key is compromised, thus enhancing the overall security and resilience of your system. For symmetric encryption, it is generally recommended to rotate keys every 30 to 90 days.

Note that you **cannot rotate keys with a usage set to asymmetric encryption and/or signature**.

<Requirements />

- A Scaleway account logged into the [console](https://console.scaleway.com)
Expand Down
Loading