---
schema_version: "1"
id: 2f937bb71889b3b62d1433212ff888ad9996a6b2c8bcffe047e6b2d728c1aaaf
title: Import an Encryption Key
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_import_byok.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_import_byok.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a457b80cb7d4014411654d55b050236f8cbf9735afe4848ed14de5a6c714c27f
description: To provision data for encryption at rest, you get a key that's generated by Marketing Cloud Engagement. After you import your own key, perform a key rotation operation to use your newly imported key.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Import an Encryption Key

To provision data for encryption at rest, you get a key that's generated by Marketing Cloud Engagement. After you import your own key, perform a key rotation operation to use your newly imported key.

1. Hover over your name and click **Setup**.
2. Type Bring Your Own Key in the search field and click **Bring Your Own Key**.
3. Click **New Key** and select **Import Wrapped Key**.
4. Enter the name of the key. Choose a meaningful name for ease of identification of the key.
5. Review the RSA public key value in the **Wrapping Key** field.
    
    You copied this key in step 4 of [Create Your Encryption Key](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_create_byok.htm&release=264.0.0&type=5 "You can create an encryption key in Marketing Cloud Engagement, using multiple keys for the creation and wrapping process. You provide the wrapped version of the Intermediate Key and Private Key. Use Base64 encoding for the wrapped keys before you import them.").
6. For your key type and key size, select **RSA2048**.
7. Copy and enter the value of the oaep\_wrapped\_intermediate\_aes\_key.b64 file created in step 12 of [Create an Encryption Key](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_create_byok.htm&release=264.0.0&type=5 "You can create an encryption key in Marketing Cloud Engagement, using multiple keys for the creation and wrapping process. You provide the wrapped version of the Intermediate Key and Private Key. Use Base64 encoding for the wrapped keys before you import them.") in the **Wrapped AES Wrapping Key** field. Use base64 encoding with this value.
8. Copy and enter the RSA private key value from theaes\_wrapped\_user\_rsa\_key.b64 file created in step 13 of the [Create an Encryption Key](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_create_byok.htm&release=264.0.0&type=5 "You can create an encryption key in Marketing Cloud Engagement, using multiple keys for the creation and wrapping process. You provide the wrapped version of the Intermediate Key and Private Key. Use Base64 encoding for the wrapped keys before you import them.") in the **Wrapped RSA Key Value** field. Use base64 encoding with this value.
9. Click **Import Wrapped Key**.
    
    The imported key appears in the Bring Your Own Key section. Retain the wrapped and encoded key files for restoring the key if necessary.