Updated on 2025-04-16 GMT+08:00

Updating a Data Source Key

You can manually or periodically update a data source key (DSK) to ensure service security.

Prerequisites

The key has been initialized. For details, see Initializing a Key.

Procedure

  1. Log in to a database encryption and access control instance as the sysadmin user.
  2. In the navigation pane on the left, choose Key Management > Key Configuration.
  3. In the Key Update area, edit a periodic update task or update the DSK now.

    Figure 1 Key update

  4. To manually update the DSK, perform the following operations:

    1. Click Update Key Now.
    2. In the displayed Password Verification dialog box, enter the security password, and click Confirm.

  5. To periodically update the DSK, perform the following operations:

    1. Click Edit next to Periodic Update Key.
    2. In the displayed Modify Key Update Cycle dialog box, configure the update time. Table 1 describes the parameters.
      Table 1 Configuring key update cycle

      Parameter

      Description

      Update Cycle

      Key update period. The options are as follows:
      • None: No periodic updates are performed.
      • Daily: The data is updated once a day.
      • Weekly: The data is updated once a week.
      • Monthly: The data is updated once a month.

      Update Time

      Configure the key update time based on the key update period.

  6. Click Save.

Follow-up Operations

After the DSK is updated, the system destroys the original DSK and generates a new DSK. You can view the key changing status by referring to Viewing Key Details.