Why can't I rotate root keys?

IBM Cloud® Hyper Protect Crypto Services is deprecated. As of 28 March 2026, you can't create new instances, and access to free instances will be removed. Existing premium plan instances are supported until 28 March 2027. Any instances that still exist on that date will be deleted.

When you access the UI, you do not see the options to rotate root keys.

From the IBM Cloud dashboard, you see a list of keys in the Keys table. However, by selecting the key that you want to rotate and clicking the Actions icon , you don't see the Rotate key option on the list.

You do not have the correct authorization to perform Hyper Protect Crypto Services actions.

Verify with your administrator that you're assigned the correct role in the applicable resource group or service instance. For more information about roles, see Roles and permissions.