Deleting an Encryption Rule or Key

Click the trash can icon after selecting an encryption rule or encryption key to delete it; see Figure 1 for details.

If an encryption rule and its corresponding key have already been used, you cannot delete them.

Figure 1 Deleting an encryption rule or key

• Caution when updating keys: Key updates are significant operations that should be performed with care. Updating keys may render existing encrypted data unreadable unless an appropriate migration strategy and backup plan are in place.

• Plan Update: If a key update is required, it should be planned in advance and all relevant parties should be notified. Ensure that the update process does not impact business continuity, and maintain a rollback plan.

• Secure Transition: Establish a secure transition period between the old and new keys, as well as between the new key and the old key, to prevent disruptions in data access.

• Do not delete keys arbitrarily: Deleting a key may result in the irreversible loss of encrypted data. Unless there is a clear business requirement or a well-defined data migration plan, do not delete keys.

• Backup key: Before deleting a key, ensure that all encrypted data is backed up and can be decrypted using the new key or another key.

• Recording and Auditing: Record the deletion of keys and generate appropriate audit trails to comply with regulatory requirements.