Updated on 2023-09-07 GMT+08:00

Creating a Common Secret

This section describes how to create a secret on the CSMS console.

You can create a secret and store its value in its initial version, which is marked as SYSCURRENT.

Constraints

  • A user can create a maximum of 200 secrets.
  • By default, the default key csms/default created by CSMS is used as the encryption key of the current secret. You can also create a user-defined symmetric key and use a user-defined encryption key on the KMS console.

Creating a Secret

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security & Compliance > Data Encryption Workshop.
  4. In the navigation pane, choose Cloud Secret Management Service.
  5. Click Create Secret. Configure parameters in the Create Secret dialog box, as shown in Figure 1. For more information, see Table 1.

    Figure 1 Creating a secret
    Table 1 Secret parameters

    Parameter

    Description

    Type

    Secret type. The default value is Shared secret.

    Secret Name

    Secret name

    Enterprise Project

    Enterprise project that the secret is to be bound to

    Secret Value

    Secret key/value pair and the plaintext secret to be encrypted

    Description

    Description of a secret

    KMS Encryption Key

    Select the default key csms/default or a custom key created on KMS.

    NOTE:

    By default, the default key csms/default created by CSMS is used as the encryption master key of the current secret. You can also create a key or use a custom key on the KMS console. For details, see Creating a Key.

    Associated Event

    When creating a secret, you can associate it with a secret event. You can add, delete, modify, and query secret versions on the event notification page.

  6. Click Next and set the rotation period.
  7. Click Next and confirm the creation information.
  8. Click OK.

    In the secret list, you can view created secrets. The default status of a secret is Enabled.