![Set up BYOK with Cloud.ru KMS](https://pachca.com/help/cloudru-art.jpg)

# Set up BYOK with Cloud.ru KMS

> How to set up BYOK with Cloud.ru KMS in Pachca, the team chat app. Step-by-step instructions with examples

Источник: https://pachca.com/en/help-center/administration/instrukciya-po-nastroyke-byok-s-kms-cloud-ru

1.  In [cloud.ru](https://cloud.ru), go to user management.

![User management in cloud.ru](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628566867-bnasm.png)

‍

2.  Go to **Service accounts** and click **Create service account**.

![Creating a service account in cloud.ru](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628567372-10lhm6.png)

‍

3.  Assign the **Service user** role and select **sckm.user**.

![Assigning the sckm.user role](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628567845-bhuyl8.png)

‍

4.  In the **Access keys** section of the new user, click **Create key**.

![Creating an access key for the service account](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628568193-isyk7.png)

‍

5.  Set any key lifetime you need. If the key has an expiration date, you'll need to replace it yourself before it expires.

![Setting the key lifetime](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628568662-53paw.png)

‍

6.  Copy the keyId and secret values.

7.  In Pachca, enter them in JSON format:

`{ "keyId": "1bf45****", "secret": "712d****" }`

![Entering keyId and secret in Pachca in JSON format](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628569007-phtlao.png)

‍

8.  Go to **Key Management** and click **Create key**.

![Creating a key in cloud.ru Key Management](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628569482-t18ucm.png)

‍

9.  Create a symmetric key. Don't set a rotation period.

![Creating a symmetric key without rotation](https://pachca.com/help/instrukciya-po-nastroyke-byok-s-kms-cloud-ru-1762628570191-pouuwt.png)

‍

10.  Copy the ID of the new key and enter it in the **KMS Key ID** field in Pachca.

11.  Click **Enable encryption**.

Advanced data encryption is now on for your Pachca workspace.

‍

Updated: September 1, 2025