Oracle Cloud Infrastructure Documentation

Listing Vault Replicas

Learn how to list OCI vault replicas.

    1. Open the navigation menu , select Identity & Security, and then select Vault.
    2. Under List scope, select a compartment that contains the vault resources.
    3. From the list, select the name of a vault.
    4. The Console displays the following information. Select View Replica Details for information on vault replicas.
      • Compartment: The unique, Oracle-assigned ID of the compartment that contains the vault.
      • OCID: The unique, Oracle-assigned ID of the vault.
      • Created: The date and time when you initially created the vault.
      • HSM Key Version Usage: The number of all key versions across all HSM-protected master encryption keys that the vault contains. A master encryption key comprises one or more key versions, up to the limit allowed by service limits.
      • Software Key Version Usage: The number of all key versions across all software-protected master encryption keys that the vault contains. This can include one or more key versions for each master encryption key, up to the limit allowed by service limits.
      • Virtual Private: Indicates if the vault is a virtual private vault.
      • Cryptographic Endpoint: The service endpoint for Encrypt, Decrypt, and GenerateDataEncryptionKey operations.
      • Management Endpoint: The service endpoint for CreateKey, CreateKeyVersion, EnableKey, DisableKey, UpdateKey, ListKeys, ListKeyVersions, GetKey, GetKeyVersion, ImportKey and ImportKeyVersion operations.
      • Replication Role: Indicates if the vault is a source or replica vault.
      • Replication Details Provides details on replicas of a vault.
      • Wrapping Key: The public RSA wrapping key for the vault.

  • Open a command prompt and run oci kms management vault change-compartment to move a vault from one compartment to another within the same tenancy:

    oci kms management vault change-compartment --vault-id <target_vault_id> --compartment-id <new_compartment_id>

    For example:

    Open a command prompt and run oci kms management vault get to view the configuration details for a vault:

    oci kms management vault get --vault-id <target_vault_id>

    For example:

    
oci kms management vault get --vault-id ocid1.vault.region1.sea.exampleaaacu2.examplesrcvbtqe5wgrxn2jua3olmeausn5fauxseubwu5my5tf3w3j33edq

    For a complete list of parameters and values for CLI commands, see KMS CLI Command Reference.

  • Use the ListVaultReplicas API with the KMSVAULT API endpoint to retrieve a list of replicas of a vault in OCI.

    For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.