Assigning a key to a File System

Assign a key to a file system using the OCI Console and CLI interface.

• Console
• CLI
• API

• 1. Open the navigation menu and click Storage. Under File Storage, click File Systems.
  2. Under List Scope, in the Compartment list, choose the compartment where you want to create a file system that's encrypted with a Vault service master encryption key.

  3. Click Create File System, and then follow the instructions in Creating File Systems.

• Run the CreateFileSystem and UpdateFileSystem to create and assign a key to a file system.

  For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.

• Use the fs file-system update command and required parameters to encrypt the file system using the specified key:

  oci fs file-system update --file-system-id <file_system_OCID> --kms-key-id <target_key_id>

  Leave the --kms-key-id value unspecified to use Oracle-managed keys for encryption:

  oci fs file-system update --file-system-id <file_system_OCID> --kms-key-id ""

  For a complete list of parameters and values for CLI commands, see KMS CLI Command Reference.