KES Command Line Interface

Quickstart

The KES server and CLI is available as a single binary, container image or can be build from source.

Binary Downloads

Binary Releases

Download the binary for your OS and system architecture.

Download the binary using curl. Replace <OS> and <ARCH> with your operating system and CPU architecture.

curl -sSL --tlsv1.2 'https://github.com/minio/kes/releases/latest/download/kes-<OS>-<ARCH>' -o ./kes

chmod +x ./kes

You can also verify the binary with minisign by downloading the corresponding .minisig signature file. Run:

curl -sSL --tlsv1.2 'https://github.com/minio/kes/releases/latest/download/kes-<OS>-<ARCH>.minisig' -o ./kes.minisig

minisign -Vm ./kes -P RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav

Docker

Pull the latest release via:

docker pull minio/kes

Homebrew Source

After obtaining the binary, run it from the terminal with any of the available commands.

Command	Description
Start
`server`	Start a KES server
Manage
`identity`	Manage KES identities
`key`	Manage cryptographic keys
`policy`	Manage KES policies
Audit
`log`	Print error and audit log events
`metric`	Print server metrics
`status`	Print server status
Administer
`migrate`	Migrate KMS data
`update`	Update KES binary