Apache CloudStack 4.23.0.0 Root Admin API Reference
rotateKMSKey
Rotates KMS key (KEK) by creating new version and scheduling gradual re-encryption
Request parameters
| Parameter Name | Description | Required |
| id | KMS Key UUID to rotate | true |
| hsmprofileid | The target HSM profile ID for the new KEK version. If provided, migrates the key to this HSM. | false |
| keybits | Key size for new KEK (default: same as current) | false |
Response Tags
| Response Name | Description |
| account | The Account that executed the async command |
| accountid | The Account ID that executed the async command |
| cmd | The async command executed |
| completed | The completed date of the job |
| created | The created date of the job |
| domainid | The domain ID that executed the async command |
| domainpath | The domain that executed the async command |
| jobinstanceid | The unique ID of the Instance/entity object related to the job |
| jobinstancetype | The Instance/entity object related to the job |
| jobprocstatus | The progress information of the PENDING job |
| jobresult | The result reason |
| jobresultcode | The result code for the job |
| jobresulttype | The result type |
| managementserverid | The MSID of the management server on which the job is running |
| managementservername | the management server name of the host |
| userid | The User that executed the async command |
| jobid | the ID of the async job |