Create New Version of Key

1. Create a new NAEKey object and call the getSecretKey method to get a key from the Key Manager. This must be a versioned key, otherwise the next step will fail with an NAEException.

2. Call the generateVersion method of the NAEKey. This method returns an integer indicating the version number. You may want to capture that information. The new version is automatically put in the Active state. There can be no more than 4000 versions.

3. Obtain an instance of KeyGenerator. Pass the key algorithm and provider name (IngrianProvider) as arguments.

4. Initialize the cipher for encryption.

5. Call the generateKey method of the KeyGenerator object to create the key.

Code sample

The following code sample generates a version of a key.

NAEKey key = NAEKey.getSecretKey(keyName, session);
int newVersion = key.generateVersion();

The most active version of a key is always the default version.