KMS Quick Start (System Mode)
A walkthrough of viewing, checking, and managing the platform's internal system security assets (encryption keys, secrets, certificates).
Prerequisites
- You must have system administrator (SysAdmin) privileges
- You must be able to open the KMS app on the desktop
KMS does not issue assets
KMS is not a source-of-issuance system. The initial issuance of keys, secrets, and certificates is handled by each app or integrated system; KMS handles storage, lookup, and state control.
1. Open the KMS app
Launch the KMS app from the desktop. It opens on the Overview dashboard, and the left sidebar lets you move between the four screens — Overview · Encryption Keys · Secrets · Certificates.
2. Check status (Overview)
Review the platform-wide status at a glance on the dashboard.
- Whether any keys are past their rotation deadline (Rotation Overdue)
- Whether any certificates need attention (expiring soon)
- Secret counts by status (Active, Expired, Deactivated, Deleted)
3. Manage each asset
| Purpose | Screen |
|---|---|
| View, rotate, archive, destroy encryption keys | Manage encryption keys |
| Manage secret values, tags, expiration | Manage secrets |
| View, renew, revoke certificates | Manage certificates |
Verify success
- You can see the per-status counts of each asset on the Overview summary cards.
- State changes such as rotation and renewal are reflected immediately in the list and detail screens.
- Every state transition is recorded in the audit log with a reason.