[Upgrade] KMS 3.0 instance upgrades for v2.3.0 and earlier
Dear Alibaba Cloud user,
To enhance service quality, product experience, and stability, Alibaba Cloud will automatically upgrade Key Management Service (KMS) 3.0 instances running image version 2.3.0 or earlier, starting July 21, 2025. We apologize for any inconvenience this may cause.
Upgrade scope
This automatic upgrade applies only to KMS 3.0 instances running image version 2.3.0 or earlier. If your KMS 3.0 instance is running a version later than 2.3.0, you must upgrade it manually. For instructions, see Upgrade the image version of a KMS instance.
New features and enhancements
-
Migrate resources from KMS 1.0 (shared edition) to KMS 3.0 instances. For more information, see Migrate resources from KMS 1.0 to a KMS 3.0 instance.
-
Access KMS 3.0 instances over the public network. For more information, see Access keys in a KMS instance over the public network.
-
Faster secret retrieval by caching encrypted secrets in Redis.
-
Enhanced KMS security.
For more information, see the Release Notes.
Upgrade impact
The upgrade process takes approximately 30 minutes. During this time, you may experience a brief service interruption. Service will resume automatically after the upgrade.
Upgrade schedule and methods
Automatic system upgrade
From July 21 to July 31, 2025 (UTC+08:00), the system will automatically upgrade affected KMS 3.0 instances to the latest version. The specific upgrade date and time for each instance will be scheduled automatically.
If the automatic upgrade window overlaps with your peak business hours, we recommend customizing the upgrade for an off-peak period to avoid impacting your business.
Customize upgrade time and method
Before July 21, 2025, you can log in to the Key Management Service console to customize the upgrade schedule and method for your instance.
-
Software key management instances
You can choose to upgrade immediately or schedule an automatic upgrade for a specific time. For more information, see Upgrade the image version of a KMS instance.
Log on to the Key Management Service console. In the top navigation bar, select a region. In the left-side navigation pane, choose .
-
Find the target instance and in the Actions column, click Details.
-
On the Instance tab, click Upgrade and select an upgrade method.
-
Automatic Upgrade: Set a time for the upgrade. The system will automatically upgrade the instance to the latest version at the specified time.
-
Manual Upgrade: Start the upgrade immediately.
-
-
Hardware key management instances
You cannot customize the upgrade schedule or method for these instances. Please contact technical support for assistance.
FAQ: Check KMS 3.0 instance image version
Log on to the Key Management Service console. In the top navigation bar, select a region. In the left-side navigation pane, choose .
-
Find the target instance and in the Actions column, click Details.
-
On the Instance tab, find the Image Version field in the Basic Information section. This field shows the current version of your KMS 3.0 instance. To initiate an upgrade, click Upgrade Version on the right.