7 Create the Object Storage Bucket Key

1. Sign in to the Oracle Cloud Console as an Account Administrator with appropriate privileges.
2. Open the Navigation menu, select Identity & Security, and in the Key Management section, select Vault.
3. On the Vaults page, select the Vault list and select <VAULT_NAME>.
4. On the Vaults details page, select Master encryption keys.
5. Select Create Key.
6. On the Create Key page, enter the following:
   1. In the Create in Compartment list, select the <COMPARTMENT_NAME>.
   2. In the Protection Mode list, select HSM.
   3. In the Name field, enter: OPCBYOKBucketKey1.
   4. In the Key Shape: Algorithm list, select AES (Symmetric key used for Encrypt and Decrypt).
   5. In the Key Shape: Length list, select 256 bits.
   6. Import External Key: By default, this toggle is off. It indicates OCI will create the key. If you want to import an external key, follow the instructions in Import an External Key to wrap the external key and upload, and then return here to continue.
7. In the Tags section, select Add tag.
   1. In the Namespace list, select: OPCBYOKSecurity.
   2. In the Key list, select BucketKey.
   3. In the Value field, enter true.
8. In the Tags section, select Add tag.
   1. In the Namespace list, select: OPCBYOKSecurity.
   2. In the Key list, select IsCurrent.
   3. In the Value field, enter true.
9. Click Create Key.