---
name: hs-crypto-uko-edit-internal-keystores
title: Editing internal keystores
description: You can edit your internal keystores in Unified Key Orchestrator with the UI, or programmatically with the Unified Key Orchestrator API.
last-updated: 2026-07-01
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/hs-crypto?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Editing internal keystores
{: #edit-internal-keystores}

IBM Cloud® Hyper Protect Crypto Services is deprecated. As of 28 March 2026, you can't create new instances, and access to free instances will be removed. Existing premium plan instances are supported until 28 March 2027. Any instances that still exist on that date will be deleted.
{: deprecated}

You can edit your internal keystores in Unified Key Orchestrator with the UI, or programmatically with the Unified Key Orchestrator API.
{: shortdesc}

## Editing internal keystores with the UI
{: #edit-internal-keystores-ui}
{: ui}

To edit the details of an internal KMS keystore by using the UI, complete the following steps:

1. [Log in to the Hyper Protect Crypto Services instance](https://cloud.ibm.com/login){: external}.
2. Click **Keystores** from the navigation to view all the available keystores.
3. Click the internal keystore that you want to edit. The Details side panel is displayed.
4. Click **Edit** to update the **Keystore name** and **Description**. 

    The keystore name must be of 1 to 100 characters in length. The first character must be a letter (case-sensitive) or digit (0-9). The rest can also be symbols (.-_) or spaces. The description can be up to 200 characters in length.
  
    You can filter and search the keys that are distributed to this keystore, but you cannot edit key details or change key states from the side panel. To edit the details of the keys, see [Editing key details](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-edit-kms-keys&format=markdown).
    {: tip}

5. Click **Save** to save the changes.

You can search for a specific keystore by using the search bar, or filter keystores based on your needs by clicking the **Filter** icon ![Filter icon](../icons/filter.svg "Filter") in the **Keystores** table.
{: tip}





## Editing internal keystores with the API
{: #edit-internal-keystores-api}
{: api}

To edit the details of an internal keystore through the API, follow these steps:

1. [Retrieve your service and authentication credentials to work with keystores in the service](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-set-up-uko-api&format=markdown).
   
2. Update an internal keystore by making a `PATCH` call to the following endpoint.

    ```
    https://<instance_ID>.uko.<region>.hs-crypto.appdomain.cloud/api/v4/keystores/<id>
    ```
    {: codeblock}

    Replace `<id>` with the ID of your keystore.

    For detailed instructions and code examples about using the API method, check out the [Hyper Protect Crypto Services Unified Key Orchestrator API reference doc](https://cloud.ibm.com/apidocs/uko#update-keystore){: external}.



## What's next
{: #edit-internal-keystores-next}

- To find out instructions on adding an internal keystore, check out [Creating internal keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-create-internal-keystores&format=markdown).

- To find out how to delete an internal keystore, check out [Deleting internal keystores](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-delete-internal-keystores&format=markdown).