Import keys
Bring key inventory data from your key management systems into DigiCert® Quantum Central to build a centralized view of the cryptographic keys in your environment.
Quantum Central imports key metadata only. Private key material is never accessed, exported, or imported.
After import, you can view key details such as algorithm, key size, status, quantum-safe status, and source in the Keys inventory.
Supported import sources
You can import key inventory data from the following sources:
Azure Key Vault - Export key metadata using the Azure CLI.
AWS Key Management Service - Export key metadata using AWS CLI v2.
Google Cloud KMS - Export key metadata using the Google Cloud CLI.
CSV file - Upload key metadata from another source using the provided CSV format.
For Azure Key Vault, AWS Key Management Service, and Google Cloud KMS, Quantum Central provides an export script that collects key metadata and creates a CSV file for import.
Start a key import
To start a key import:
In Quantum Central, select Inventory from the left navigation.
Select the Keys tab.
Select Import Keys.
In the Import Keys panel, select the source you want to import from.
Import from a supported service
Quantum Central provides a script that collects key metadata from the following supported services and prepares it for import:
Azure Kay Vault
AWS Key Management Service
Google Cloud KMS
The workflow is the same for each supported service. Run the script in an environment where the corresponding command-line interface (CLI) is installed and authenticated.
Before you begin
If you do not have the required CLI, use the Install link in the Import Keys panel. You can also select Docs to open the provider documentation.
If you do not have CLI access, select Ask your team to run it.
To import keys from a supported service:
In the Import Keys panel, select Azure Key Vault, AWS Key Management Service, or Google Cloud KMS.
Under Copy or download the export script, select the operating system where you want to run the script:
MacOS/Linux
Windows
Copy the script or download it.
Run the script locally.
The script checks for the required CLI, your authenticated session, and the permissions required to retrieve key metadata. When the process completes, the script creates a timestamped CSV file.
If the script stops before completing, expand Script stopped? for troubleshooting information.
Under Upload the generated CSV, drop the generated CSV file into the upload area, or select Browse files.
Select Import.
Import from another CSV file
Use this option when you have key inventory data from another source.
To prepare the file, download the sample CSV from the Import Keys panel and use it as a template. Match the sample template's columns for the cleanest mapping.
To import the file:
In the Import Keys panel, select Other CSV file.
Select Download sample CSV and prepare your key metadata file.
Drop the CSV file into the upload area, or select Browse files.
Select Import.
After you import keys
After Quantum Central processes the import, the keys appear on the Inventory page, under the Keys tab.
Use the key inventory to review key details, including the key algorithm, key size, status, quantum-safe status, and source.