All Products
Search
Document Center

Key Management Service:Getting started overview

Last Updated:Mar 31, 2026

Key Management Service (KMS) lets you centrally manage encryption keys and secrets that protect your sensitive data. With KMS, you can:

  • Manage keys — Create and control Customer Master Keys (CMKs) that encrypt data across Alibaba Cloud services

  • Manage secrets — Store sensitive credentials and prevent the leak of sensitive information

Get started

Complete these steps in order. Each step builds on the previous one.

Step 1: Activate KMS

KMS requires activation before use. Purchase a dedicated KMS instance to get started.

Purchase a dedicated KMS instance

Step 2: Create a CMK

Create a CMK in the KMS console.

Create a CMK

Step 3: Use a key to encrypt data

Use your CMK to encrypt resources across Alibaba Cloud services.

Step 4: Manage secrets

Use a secret to store protected data and prevent the leak of sensitive information.