Manage Key Version and Rotation

Key Version Management - MVP Functions

Objective

Key Version Management Objectives:

  • Maintain Data Accessibility: Ensure historical data remains decryptable by preserving previous key versions during rotation

  • Enable Secure Key Rotation: Support regular key updates to limit cryptographic exposure and meet compliance requirements

  • Provide Operational Flexibility: Allow controlled rollback to previous versions if needed while maintaining security

  • Support Compliance: Facilitate audit trails and demonstrate proper key lifecycle management for regulatory standards

Functions

1. Key Version Listing

  • View all versions of a specific key

  • See version numbers, creation dates, and status

  • Identify which version is currently active

2. Manual Key Rotation

  • "Rotate Now" button to create new key version

  • New version automatically becomes active

  • Previous versions remain accessible for data decryption

3. Version Promotion

  • Set any existing version as primary/active

  • Use checkmark icon + "Set Primary" confirmation

  • Enables rollback to previous versions when needed

4. Version Eviction

  • Remove old key versions that are no longer needed

  • Ensures only relevant versions are retained

  • Maintains clean version history

Guideline and Walkthrough

Last updated