Skip to main content

Get export key


Gets an encrypted copy of the key used to encrypt exported data. The key is encrypted using the export KMS key defined by the PVAULT_KMS_EXPORT_URI or PVAULT_KMS_EXPORT_SEED environment variables. When importing data, the key is provided to the Vault and decrypted by the KMS, then used to decrypt the data.

The role that performs this operation must have the CapExportKeyReader capability. See Access control for more information about how capabilities are used to control access to operations.

Possible responses

The request is successful.

object required*
  • export_key - string required*

    The key used to encrypt and decrypt exported data.

"export_key": "string"

Try the API


Navigate to the docs of your local Vault installation to try the API directly from there.

Code examples