Create a Key Manager key

Reviewed on August 27, 2025

Scaleway's Key Manager allows you to create key encryption keys from the Scaleway console (External link). Key encryption keys can then be used to encrypt and decrypt your encrypted data.

Before you start

To complete the following actions, you must have:

• A Scaleway account logged into the console (External link)
• Owner status or IAM permissions allowing you to perform actions in the intended Organization

How to create a Key Manager key

1. Click Key Manager in the Security & Identity section of the Scaleway console (External link) side menu.
2. Click + Create key.
3. Choose the region in which you want to create your key.
4. Enter a name, a description, and optional tags for your key.
5. Select the encryption method for your key. Key Manager supports:
   • Symmetric encryption using the AES-256 CGM algorithm
   • Asymmetric encryption using the RSA_OAEP_2048_SHA256, RSA_OAEP_3072_SHA256 (recommended), or RSA_OAEP_4096_SHA256 algorithms.
   • Asymmetric signature using the EC_P256_SHA (recommended), EC_P384_SHA384, RSA_PKCS1_2048_SHA256, RSA_PCKS1_3073_SHA256, PSA_PKCS1_4096_SHA256, RSA_PSSS_2048_SHA256, RSA_PSS_3072_SHA256, and RSA_PSS_4096_SHA256 algorithms.
6. Switch the toggle icon icon to disable key protection or leave it enabled.
   Note

   Key protection allows you to protect your key from accidental deletion.

7. Check the estimated cost, then click Create key. Your key's Overview page displays.