Saltar al contenido principal
POST
Rotar la KEK de una institución

Autorizaciones

Authorization
string
header
requerido

JWT bearer token issued by the identity provider.

Parámetros de ruta

institutionId
string
requerido

The institution's unique identifier (UUID) the KEK rotation targets.

Ejemplo:

"44444444-4444-4444-4444-444444444444"

Cuerpo

application/json
reason
string

Optional operator-supplied free-text reason for the rotation (sealed verbatim into the audit payload).

Ejemplo:

"scheduled_annual_rotation"

Respuesta

OK

institutionId
string
requerido

The institution the rotation targeted.

Ejemplo:

"44444444-4444-4444-4444-444444444444"

newKekVersion
string
requerido

The newly active KEK version.

Ejemplo:

"v3"

previousKekVersion
string
requerido

The KEK version that was active before the rotation.

Ejemplo:

"v2"

rewrapStatus
string
requerido

The rewrap progress status (e.g. IN_PROGRESS).

Ejemplo:

"IN_PROGRESS"

rotatedAt
string
requerido

The RFC3339 timestamp the rotation committed.

Ejemplo:

"2026-06-08T12:00:00Z"