Rotating a DKE Endpoint
Use the post /v1/cckm/microsoft/dke/endpoints/{id}/rotate API to rotate a Microsoft DKE endpoint. Rotate adds a new asymmetric key version to this endpoint.
Syntax
curl -k '<CCKM IP address>/api/v1/cckm/microsoft/dke/endpoints/<id>/rotate' -X POST -H 'Authorization: Bearer AUTHTOKEN' -H 'accept: application/json' --compressed
Here, {id} is the ID of the DKE endpoint.
Request Parameter
| Parameter | Type | Description |
|---|---|---|
| AUTHTOKEN | string | Authorization token. |
| id | string | ID of the DKE endpoint. |
Example Request
curl -k 'https://127.0.0.1/api/v1/cckm/microsoft/dke/endpoints/3debd6ce-8582-4bac-a7f0-f862495be285/rotate' -X POST -H 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.FogBUewuim9jRS0lWOUs51S53oTxjohOhq-pL7XCRcA' -H 'accept: application/json' --compressed
Example Response
{
"id": "3debd6ce-8582-4bac-a7f0-f862495be285",
"uri": "kylo:kylo:cckm:dke-endpoint:3debd6ce-8582-4bac-a7f0-f862495be285",
"account": "kylo:kylo:admin:accounts:kylo",
"createdAt": "2023-06-23T07:15:44.12519Z",
"updatedAt": "2023-06-23T07:16:02.790889Z",
"name": "dkeEndpoint_8184",
"description": "demo dke endpoint 1",
"key_uri_hostname": "dke.thales.com",
"key_uri": "https://dke.thales.com/api/v1/cckm/microsoft/dke-data-plane/endpoints/3debd6ce-8582-4bac-a7f0-f862495be285/keys/ks-e998720b0e8e4ccc9ecf6a6e125ccce16356ba90b31540478a4d23fed4216203",
"kek_name": "ks-e998720b0e8e4ccc9ecf6a6e125ccce16356ba90b31540478a4d23fed4216203",
"kek_id": "e998720b0e8e4ccc9ecf6a6e125ccce16356ba90b31540478a4d23fed4216203",
"kek_uuid": "43b12fe5-3d25-46cd-b86b-ce8fe944daca",
"meta": {
"size": "big",
"color": "blue"
},
"kek_version": "1",
"key_type": "asymmetric",
"algorithm": "RSA_DECRYPT_OAEP_2048_SHA256",
"enable_success_audit_event": true,
"auth_tenants": [
"95180635-b494-4f57-b9ba-a250aeac741f"
],
"auto_rotate": false,
"status": "Enabled"
}
The sample output shows that the endpoint is successfully rotated from the CCKM. The kek_version parameter now reflects the new key version of 1. It was previously set to 0.
Response Codes
| Response Code | Description |
|---|---|
| 2xx | Success |
| 4xx | Client errors |
| 5xx | Server errors |
Refer to HTTP status codes for details.
