doc-exports/docs/kms/umn/kms_01_0055.html
Li, Qiao d9e750baf4 KMS User Guide 20231019 version.
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: Li, Qiao <qiaoli@huawei.com>
Co-committed-by: Li, Qiao <qiaoli@huawei.com>
2024-06-10 13:07:34 +00:00

2.9 KiB

What Are the Differences Between a Custom Key and a Default Key?

The following table describes the differences between a custom key and a default key.

Table 1 Differences between a custom key and a default key

Item

Definition

Difference

Custom key

A Key Encryption Key (KEK) created using KMS. The key is used to encrypt and protect DEKs.

A custom key can be used to encrypt multiple DEKs.

  • It can be disabled and scheduled for deletion.
  • It is billed per use after the being created or imported.

Default key

Automatically generated by the system when you use KMS to encrypt data in another cloud service for the first time. The suffix of the key is /default.

Example: evs/default

  • It cannot be disabled or scheduled for deletion.