Viewing a CMK

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click . ChooseSecurity > Data Encryption Workshop.

4. Check the key list. Table 1 describes the parameters.
   Figure 1 Custom keys
   
   Figure 2 Default keys
   

   Table 1 Key list parameters

   Parameter	Description
   Alias/ID	Alias of a key and the random ID of a key generated during its creation. NOTE: Use this ID as the value of Path if you are creating a custom policy in IAM and have selected Specify resource path for KeyId.
   Status	Status of a CMK, which can be one of the following: Enabled The CMK is enabled. Disabled The CMK is disabled. Pending deletion The CMK is scheduled for deletion. Pending import If your CMK does not have materials, its status is Pending import.
   Creation Time	Creation time of the CMK
   Key Algorithm and Usage	Key algorithm selected during key creation and its usage
   Origin	Source of key material, which can be one of the following: External The key is imported to the KMS from an external system. Key Management Service The key is a default key or created in KMS.
   Enterprise Project	Enterprise project the CMK is used for
   Operation	Operations you can perform on the key, such as disable, delete, import key material, or cancel deletion. You can also assign keys to projects.

5. You can click the alias of a key to view its details, as shown in Figure 3.
   Figure 3 CMK details
   
   

   To change the alias or description of the CMK, click next to the value of Alias or Description.

   • A default key (the alias suffix of which is /default) does not allow alias and description changes.
   • The alias and description of a CMK cannot be changed if the CMK is in Pending deletion status.