3 Workflows for Typical Use Cases

For certain use cases, you must run the Oracle Cloud Infrastructure Object Storage Classic File Transfer Manager command-line interface (FTM CLI) commands in a specific sequence. Some of these use cases are described here. Use this information as a guide to learn how to use the FTM CLI tool.

Downloading an Object from an Archive Container

Not Oracle Cloud at Customer This topic does not apply to Oracle Cloud at Customer.

To download an object from an archive container on your storage account, you must restore it first.
Task Procedure / CLI Command
1. Identify the object in the Archive container.  
2. Restore the object. Restoring an Object
3. Download the object. Downloading an Object

Encrypting an Object on the Client-Side

To enable client-side encryption for a file that you want to upload to the cloud service, you must use an encryption key.

Task Procedure / CLI Command
1. Generate an RSA master key for encryption

OR

Identify an existing RSA master key for encryption

Generating the Master Key
2. Upload the file by providing the master key file path along with the upload command. The FTM CLI encrypts the file using the master key before uploading it to the cloud service. Uploading Files
3. Manage the master key used for client-side encryption. You must use the same master key for decryption while downloading the object.  

Downloading a Client-Side Encrypted Object

To decrypt an encrypted object when you download it from the cloud service, specify the same master key that you’d used for encrypting the file.

Task Procedure / CLI Command
1. Identify the RSA master key that you’d used for client-side file encryption.  
2. Download the object by providing the RSA master key file path. The FTM CLI uses the master key to decrypt the object during the download.

If the object resides in a container of the archive class, then restore it first.

Downloading an Object

Downloading an Object from an Archive Container

Rotating the Client-Side Encryption Master Key

You can change the master key that you use for client-side file encryption by rotating the key.

Task Procedure / CLI Command
1. Generate a new RSA master key to replace the current RSA master key that you’d used for client-side file encryption.

OR

Identify an existing RSA master key to replace the current RSA master key that you’d used for client-side file encryption.

Generating the Master Key
2. Run the set command and provide the current master key file path and the new master key file path. Setting Object Metadata