Creating a Vault Replica

Replicate a vault to a secondary region.

Before replicating a vault to a destination region, complete the following prerequisites:

Replicate the domain to the destination region. See Identity Domain Replication.

Create a Private Endpoint (PE) in the destination region. See Creating a PE.
1. On the External Key Management Vaults page, find the vault that you want to work with. If you need help finding the list page or the vault, see Listing External Key Management Vaults.
2. Select the name of the vault that you're interested in.
3. In the vault details page, select Actions, then select Replicate Vault.
4. In the Replicate Vault dialog box, select a destination region from the list.
5. Select an identity domain from the list.
6. Select private endpoint of the destination region from the list.
7. Select Create Replica.
Use the oci kms management vault create-vault-replica command and required parameters to create a replica for the vault in another region in the same realm.
oci kms management vault create-vault-replica --replica-region target_region_id --vault-id vault_id
For a complete list of parameters and values for CLI commands, see the CLI Command Reference.
Use the UpdateVault API to update the details of an External KMS vault.

For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.