Updated on 2024-03-27 GMT+08:00

How Are Default Keys Generated?

Default keys are automatically generated.

When a user uses KMS for encryption in a cloud service for the first time, the cloud service automatically creates a key with the alias suffix /default.

You can use the management console to query but cannot disable or schedule the deletion of Default Master Keys.

Table 1 Default Master Keys

Alias

Cloud Service

obs/default

Object Storage Service (OBS)

evs/default

Elastic Volume Service (EVS)

ims/default

Image Management Service (IMS)

csms/default

Cloud Secret Management Service (CSMS)