You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In this tutorial you will learn how to use the Secret manager to store the encryption key used with [SSE-C](/object-storage/api-cli/enable-sse-c/).
19
+
In this tutorial you will learn how to use Key Manager and Secret Manager to generate and store an encryption key used with [SSE-C](/object-storage/api-cli/enable-sse-c/) to encrypt and decrypt objects stored in a Scaleway Object Storage bucket.
20
20
21
21
<Requirements />
22
22
@@ -27,7 +27,7 @@ In this tutorial you will learn how to use the Secret manager to store the encry
27
27
28
28
The goal here is to use Key Manager to generate the encryption key, store the encryption key in Secret Manager, then use it to encrypt Object Storage objects SSE-C.
29
29
30
-
###Generating the encryption key
30
+
## Generating the encryption key
31
31
32
32
Run the following commands to create a key in Key Manager, generate the encryption key, then store it in Secret Manager.
scw secret version create "$SECRET_ID" data="@ssec.key"
39
39
```
40
40
41
-
### Encryption key and digest preparation
41
+
##Preparing the encryption key and its digest
42
42
43
-
Run the following command to access the secret version to get the encryption key, encode it to base64, calculate the digest of the key (also encoded in base64), and store the outputs in environment variables.
43
+
Run the following command to access the secret version to get the encryption key, encode it to base64, calculate the MD5 digest of the key (also encoded in base64), and store the outputs in environment variables.
44
44
45
45
```bash
46
46
scw secret version access "$SECRET_ID" revision=latest raw=true > ssec.key
@@ -77,3 +77,7 @@ If you delete the secret containing the encryption key, you also lose the data e
77
77
--sse-customer-key $ENCRYPTION_KEY \
78
78
--sse-customer-key-md5 $KEY_DIGEST
79
79
```
80
+
81
+
You can now use Key Manager and Secret Manager to safely create and store an encryption key to secure your Object Storage deployment with SSE-C.
82
+
83
+
Refer to the [dedicated documentation](/object-storage/api-cli/enable-sse-c/) for more information on how to use SSE-C for Scaleway Object Storage.
0 commit comments