Home / Product Demos / Key Rotation For Encrypted Kafka Data

Product Demo

Key Rotation for Encrypted Kafka Data

Rotate Kafka encryption keys in HashiCorp Vault and instantly revoke access to old records, without re-encrypting topics or touching the data.

Watch Demo
Key Rotation for Encrypted Kafka Data

Your KMS owns your keys, so that's where rotation happens. In this demo we rotate an encryption key in HashiCorp Vault, produce new data with the new key version, then disable the old version and watch the old records become undecryptable instantly. The same mechanism powers crypto shredding for GDPR deletion requests.

What You'll Learn

  • Rotate a key in Vault and see new produces pick up the new key version
  • Disable an old key version to make data encrypted with it unreadable, with no re-encryption
  • Re-enable a key version to restore access, showing rotation is reversible until you delete