Import an Encryption Key

To provision data for encryption at rest, you get a key that's generated by Marketing Cloud Engagement. After you import your own key, perform a key rotation operation to use your newly imported key.

1. Hover over your name and click Setup.
2. Type Bring Your Own Key in the search field and click Bring Your Own Key.
3. Click New Key and select Import Wrapped Key.
4. Enter the name of the key. Choose a meaningful name for ease of identification of the key.
5. Review the RSA public key value in the Wrapping Key field.

   You copied this key in step 4 of Create Your Encryption Key.

6. For your key type and key size, select RSA2048.
7. Copy and enter the value of the oaep_wrapped_intermediate_aes_key.b64 file created in step 12 of Create an Encryption Key in the Wrapped AES Wrapping Key field. Use base64 encoding with this value.
8. Copy and enter the RSA private key value from theaes_wrapped_user_rsa_key.b64 file created in step 13 of the Create an Encryption Key in the Wrapped RSA Key Value field. Use base64 encoding with this value.
9. Click Import Wrapped Key.
   The imported key appears in the Bring Your Own Key section. Retain the wrapped and encoded key files for restoring the key if necessary.