Keys and KMS
Keys in software, HSM or cloud KMS, with dual control for the root.
Generate, back up, import and rotate keys. Root keys can be escrowed and recovered only under dual control, and cloud KMS keys show up in one inventory.
How it works

Generate, back up and rotate keys
Run the key lifecycle from the console.

Escrow and recover a root key
Escrow a root key and recover or export it with two people.

Review cloud KMS keys
See the keys held in your cloud KMS.
