Importing the Wrapped CMK to AWS KMS: GUI

  1. Open Key Management Service > Customer managed keys.

  2. Select your CMK.

  3. Click Key Material.

  4. Click Upload Key Material.

  5. Under Wrapped key material click Choose file.

  6. Select the file <wrappedkey.byok> that was created using the Utimaco byoktool.

  7. Under Import Token click Choose file.

  8. Select the file importToken_<keyId> you downloaded before. No changes were made to this file.

  9. Decide whether you want your key to expire. If that is the case, tick the Key material expires box and set the expiration date.

  10. Click Upload key material.

After a successful upload, the following notification is shown at the top of the screen:

tmp9za_npi8.jpg

Successful upload of the wrapped CMK

Using the AWS CLI you can also test your CMK by encrypting a small file.

›_ Console

> aws kms encrypt --key-id <KeyId> --plaintext file://<path to a small file> --region <region>