Skip to main content

Get export key

get
/api/pvlt/1.0/system/admin/export_key

Gets an encrypted copy of the key used to encrypt exported data. The key is encrypted using the export KMS key defined by the PVAULT_KMS_EXPORT_URI or PVAULT_KMS_EXPORT_SEED environment variables. When importing data, the key is provided to the Vault and decrypted by the KMS, then used to decrypt the data.

The role that performs this operation must have the CapExportKeyReader capability. See Access control for more information about how capabilities are used to control access to operations.

Request

Query parameters

  • custom_audit - string

    Custom audit information to be included in the audit log.

Possible responses

The request is successful.

object required*
  • export_key - string required*

    The key used to encrypt and decrypt exported data.

Example
{
"export_key": "string"
}

Try the API

Authorization

Query parameters

Navigate to the docs of your local Vault installation to try the API directly from there.

Code examples

Example