Add an Encryption Key

Once key management is enabled for your organization, you can add an encryption key. This is also known as bring your own key (BYOK).

Before you Add a Key

 Follow these steps to before you add a key:

1. Review our best practices and key guidelines along with your required processes around managing encryption keys.
2. Assign additional users to the Org Security Admin role so they can manage the encryption key for your organization.
3. Generate and securely store the key outside of the Workiva platform, following your guidelines.
4. Upload the key to enable Bring Your Own Key for your organization.
5. Set a reminder, if needed, to rotate your key based on your security guidelines.

Add an Encryption Key

Important: Workiva does not have any access to the key you upload. You need to keep and maintain the key. 

To add an encryption key:

1. From Organization Admin, click Security .
2. Click Key Management.
   
3. Click Browse and then select the file that includes your encryption key and click upload.
4. Check the box to confirm that you will keep a copy of the key.
   
5. Click Add Key.

Active Key Status

You’ll see an Active status indicator showing you that your key is now in use. After you add your encryption key, files from that point forward will use the key. Any files created prior will continue to use the default Workiva encryption.