This topic describes the release notes for Key Management Service (KMS).
Instance image release notes
Image version | Change | Change type | Description | Release date | Region | References |
dkms-3.3.0 | Improves system performance. | Optimization | Improves the stability of hardware key management instances outside the Chinese mainland. | Jul 10, 2025 | All regions | None |
dkms-3.2.2 | Software key management instances support the RSA-4096 key specification. | New feature | Software key management instances support creating asymmetric keys with the RSA-4096 specification. | Jun 18, 2025 | All regions | |
dkms-3.2.0 | Improves secret retrieval performance. | Optimization | Improves secret retrieval performance by caching secrets in ciphertext in the Redis database. | Feb 19, 2025 | All regions | None |
dkms-3.1.0 | Hardware key management instances support dynamic awareness of Hardware Security Module (HSM) cluster changes. | Optimization | Supports dynamic awareness of HSM cluster changes for data synchronization after cluster scale-out. | Jan 7, 2025 | All regions | |
dkms-3.0.0 | KMS supports calling OpenAPI through a dedicated gateway. | New feature | When performing cryptographic operations, you can use the Alibaba Cloud SDK to call OpenAPI through a dedicated gateway. | Dec 23, 2024 | All regions | |
dkms-2.9.0 | KMS security hardening. | Optimization | KMS security hardening. | Oct 31, 2024 | All regions | None |
dkms-2.8.0 | KMS 1.0 supports migration to KMS 3.0. | New feature | KMS 1.0 will enter the End of Full Support (EoFS) phase on March 30, 2025, at 00:00:00 (GMT+8) and End of Service (EOS) phase on September 30, 2025, at 00:00:00 (GMT+8). To ensure your business is not impacted, migrate KMS 1.0 resources to KMS 3.0 instances as soon as possible. | Sep 25, 2024 | All regions | |
dkms-2.7.0 | KMS supports delivering secret events to Cloud Monitor. | New feature | Events for secret rotation, scheduled deletion, and actual deletion will be delivered to Cloud Monitor. | Jun 3, 2024 | All regions |
January-June 2024
June 2024
Feature overview | Release date | Region | References |
Data Management (DMS) supports logging on to databases using KMS secrets. | Jun 3, 2024 | All regions | |
KMS software key management instances support the free automatic backup feature. | May 10, 2024 | All regions |
May 2024
Feature overview | Release date | Region | References |
KMS software key management instances support BYOK keys. | May 9, 2024 | All regions | |
KMS adds external key management instances that support HYOK keys. | Apr 29, 2024 | All regions |
April 2024
Feature overview | Release date | Region | References |
KMS adds external key management instances that support HYOK keys. | Apr 29, 2024 | All regions | |
KMS supports cross-region synchronization of keys in KMS instances. | Apr 11, 2024 | All regions |
March 2024
Feature overview | Release date | Region | References |
KMS supports resource-based access control policies. You can attach policies to resources such as keys or secrets to control which Alibaba Cloud accounts, RAM users, and RAM roles can access or perform operations on the resources. | Mar 20, 2024 | All regions |
January-December 2023
December 2023
Feature overview | Release date | Region | References |
The SecretType parameter is provided when you call the ListSecrets operation. | Dec 27, 2023 | All regions | |
The Thailand (Bangkok) region is supported. | Thailand (Bangkok) |
November 2023
Feature overview | Release date | Region | References |
Integration with Cloud Monitor (CMS) adds alert settings. System events can be monitored and alerted. | Nov 24, 2023 | All regions |
October 2023
Feature overview | Release date | Region | References |
Integration with Simple Log Service (SLS) supports storing and query analysis of access logs for the data plane of KMS instances for nearly 180 days. | Oct 30, 2023 | All regions |
September 2023
Feature overview | Release date | Region | References |
KMS instances support the generation of asymmetric data key pairs. | Sep 25, 2023 | All regions |
August 2023
Feature overview | Release date | Region | References |
KMS instances support dual-zone deployment to improve service availability and disaster recovery capabilities. | Aug 11, 2023 | All regions |
July 2023
Feature overview | Release date | Region | References |
Computing performance of 10,000 and 20,000 QPS is supported for KMS instances of the software key management type. | Jul 28, 2023 | All regions | |
The China (Chengdu) region is supported. | China (Chengdu) |
June 2023
Feature overview | Release date | Region | References |
KMS supports access to Alibaba Cloud Tag Service. Note You can add tags to multiple keys or secrets at a time compared with the original tag feature of KMS. | Jun 20, 2023 | China (Hangzhou), China (Shanghai), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Chengdu), China (Hong Kong), Japan (Tokyo), South Korea (Seoul), Singapore, Malaysia (Kuala Lumpur), Indonesia (Jakarta), Germany (Frankfurt), UK (London), US (Silicon Valley), US (Virginia), Philippines (Manila), and Thailand (Bangkok) | |
Symmetric keys in KMS instances of the software key management type can be rotated. | |||
Keys and secrets in KMS instances of the software key management type can be backed up and restored. |
April 2023
Feature overview | Release date | Region | References |
A KMS instance can be shared across multiple Alibaba Cloud accounts for server-side encryption in Alibaba Cloud services by using the resource sharing feature. | Apr 20, 2023 | China (Hangzhou), China (Shanghai), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Chengdu), China (Hong Kong), Japan (Tokyo), South Korea (Seoul), Singapore, Malaysia (Kuala Lumpur), Indonesia (Jakarta), Germany (Frankfurt), UK (London), US (Silicon Valley), US (Virginia), Philippines (Manila), and Thailand (Bangkok) |
March 2023
Feature overview | Release date | Region | References |
A new version of the KMS console is released. You can create and manage software-protected keys, hardware-protected keys, and default keys. You can also create and manage secrets. | Mar 16, 2023 | All regions |
January-December 2022
2021 and earlier
October 2021
Feature overview | Release date | Region | References |
The Philippines (Manila) region is supported. | Oct 1, 2021 | Philippines (Manila) | None |
September 2021
Feature overview | Release date | Region | References |
KMS supports Dedicated KMS Standard Edition | Sep 5, 2021 | China (Hangzhou), China (Shanghai), China (Beijing), China (Shenzhen), China (Hong Kong), Malaysia (Kuala Lumpur), and Singapore |
August 2021
Feature overview | Release date | Region | References |
KMS supports dynamic RAM secrets | Aug 13, 2021 | All regions |
January 2021
Feature overview | Release date | Region | References |
| Jan 4, 2021 | All regions |
October 2020
Feature overview | Release date | Region | References |
| Oct 20, 2020 | All regions |
July 2020
Feature overview | Release date | Region | References |
| Jul 7, 2020 | All regions |
February 2020
Feature overview | Release date | Region | References |
| Feb 24, 2020 | All regions |
December 2019
Feature overview | Release date | Region | References |
| Dec 13, 2019 | All regions |
November 2019
Feature overview | Release date | Region | References |
A hardware security module (HSM) cluster can be used to store keys in instances of the hardware key management type. HSMs meet the regulatory requirements of State Cryptography Administration (SCA). | Nov 18, 2019 | China (Beijing) and China (Shanghai) |
September 2019
Feature overview | Release date | Region | References |
| Sep 24, 2019 | All regions |
July 2019
Feature overview | Release date | Region | References |
A HSM cluster can be used to store keys in instances of the hardware key management type. | Jul 31, 2019 | Singapore and China (Hong Kong) |
May 2019
Feature overview | Release date | Region | References |
Key tags and tag-based authentication are supported. | May 1, 2019 | All regions |
July 2018
Feature overview | Release date | Region | References |
ActionTrail is supported. | Jul 24, 2018 | All regions | Use ActionTrail to query the operations of Key Management Service |
March 2018
Feature overview | Release date | Region | References |
| Aug 30, 2018 | All regions |
November 2017
Feature overview | Release date | Region | References |
KMS is available in the following regions: China (Qingdao), China (Hohhot), and Malaysia (Kuala Lumpur). | Nov 15, 2017 | China (Qingdao), China (Hohhot), and Malaysia (Kuala Lumpur) | None |
June 2017
Feature overview | Release date | Region | References |
| Jun 5, 2017 | All regions |
May 2017
Feature overview | Release date | Region | References |
| May 10, 2017 | All regions | None |
March 2017
Feature overview | Release date | Region | References |
Performance optimization. | Mar 1, 2017 | All regions | None |
January 2017
Feature overview | Release date | Region | References |
KMS is available in the China (Hong Kong) region. | Jan 22, 2017 | China (Hong Kong) | None |
November 2016
Feature overview | Release date | Region | References |
KMS is available in the following regions: Japan (Tokyo), Germany (Frankfurt), and UAE (Dubai). | Nov 29, 2016 | Japan (Tokyo), Germany (Frankfurt), and UAE (Dubai) | None |
September 2016
Feature overview | Release date | Region | References |
New APIs related to key deletion: ScheduleKeyDeletion and CancelKeyDeletion. | Sep 20, 2016 | All regions |
August 2016
Feature overview | Release date | Region | References |
The EncryptionContext parameter can be configured in the Encrypt and Decrypt API operations. | Aug 10, 2016 | All regions |
June 2016
Feature overview | Release date | Region | References |
A CMK can be enabled or disabled. | Jun 22, 2016 | All regions |
May 2016
Feature overview | Release date | Region | References |
KMS is available in the following regions: China (Beijing), China (Shanghai), and China (Shenzhen). | May 19, 2016 | China (Beijing), China (Shanghai), and China (Shenzhen) | None |
April 2016
Feature overview | Release date | Region | References |
KMS is released. | Apr 6, 2016 | All regions |