Skip to main content
Key stores

List key stores

GET/v4/config/ows/key-management/key-stores

Lists the key stores that the organisation can use for its signing keys. Use it to pick the keyStoreId of Create key or Import key, and to see the status of each key store.

The order: the local key stores that take new keys, the default one first, then another local key store of the installation only when the organisation still has keys in it, then the key stores that the organisation added, oldest first. An installation with the HSM as a dedicated option has two local key stores that take new keys, also with no key in them: local-hsm (Local vault (HSM)), the default of a new key, and local-openbao (Local vault (OpenBao)). Any other installation has one, local-openbao (Local vault). No answer has a credential: credentialsConfigured shows which credentials the wallet has. A sandbox organisation gets the key stores of its main organisation.

Authorizations

  • Authorizationstringheaderrequired

    Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.

    Scope:keys:read

Response

application/json

The key stores of the organisation.

  • keyStoresobject[]

    The key stores, in the order above.