---
schema_version: "1"
id: 3515c7013bfe2a39465e54a7e4ea6a01917dce2f0c90c2af00952a459c54fe7f
title: Restore an Encryption Key in Marketing Cloud Engagement
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_restore_byok.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_restore_byok.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ad64e9d446fcd134921e08b1fdb6d4f348981d3cbe30b455bc01697cc88881c1
description: To import your key value and restore your encryption key, use the Restore application in Marketing Cloud Engagement. Contact your account executive to confirm the correct URL for restoring your encryption key. It can take up to a week to restore a key. You can restore databases up to two weeks after the initial revocation. Databases that remain inactive for more than two weeks cannot be restored.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Restore an Encryption Key in Marketing Cloud Engagement

To import your key value and restore your encryption key, use the Restore application in Marketing Cloud Engagement. Contact your account executive to confirm the correct URL for restoring your encryption key. It can take up to a week to restore a key. You can restore databases up to two weeks after the initial revocation. Databases that remain inactive for more than two weeks cannot be restored.

- [https://sfmc-byok-restore.s1.marketingcloudapps.com](https://sfmc-byok-restore.s1.marketingcloudapps.com)
- [https://sfmc-byok-restore.s4.marketingcloudapps.com](https://sfmc-byok-restore.s4.marketingcloudapps.com)
- [https://sfmc-byok-restore.s5.marketingcloudapps.com](https://sfmc-byok-restore.s5.marketingcloudapps.com)
- [https://sfmc-byok-restore.s6.marketingcloudapps.com](https://sfmc-byok-restore.s6.marketingcloudapps.com)
- [https://sfmc-byok-restore.s7.marketingcloudapps.com](https://sfmc-byok-restore.s7.marketingcloudapps.com)
- [https://sfmc-byok-restore.s10.marketingcloudapps.com](https://sfmc-byok-restore.s10.marketingcloudapps.com)
- [https://sfmc-byok-restore.s11.marketingcloudapps.com](https://sfmc-byok-restore.s11.marketingcloudapps.com)
- [https://sfmc-byok-restore.s12.marketingcloudapps.com](https://sfmc-byok-restore.s12.marketingcloudapps.com)
- [https://sfmc-byok-restore.s13.marketingcloudapps.com](https://sfmc-byok-restore.s13.marketingcloudapps.com)
- [https://sfmc-byok-restore.s50.marketingcloudapps.com](https://sfmc-byok-restore.s50.marketingcloudapps.com)
- [https://sfmc-byok-restore.s51.marketingcloudapps.com](https://sfmc-byok-restore.s51.marketingcloudapps.com)

1. Navigate to the Restore application in Engagement.
2. Enter the restore token that you copied at the time of key revocation. This token is used as a one-time authentication token.
3. Click **Next**.
4. Enter the **KeyID**, **Wrapped AES Wrapping Key**, and **Wrapped RSA Key Value** values.
5. Click **Restore**. An Engagement representive contacts you after the process begins.
    
    If the restore request fails, retain the RequestID value from the error message. Contact your account executive and provide this value to help resolve the issue.