---
title: "Run due KMS key lifecycle checks"
method: POST
path: "/{tenantId}/kms/lifecycle/run-due"
tags: ["Lifecycle"]
---

# Run due KMS key lifecycle checks

`POST /{tenantId}/kms/lifecycle/run-due`

Forces a scan for due revoke and rotation policies. Due revocation removes keys from service resolution by updating metadata and assignments; it does not delete provider key material. Due rotation creates replacement keys and transfers active assignments according to each key's lifecycle metadata.

## Response `200`

Lifecycle actions executed by the scan.

- RunDueKmsKeyLifecycleChecksResult
  - `rotations` KmsKeyRotationRecord[], required
    - `rotationId` string, required
    - `tenantId` string, required
    - `oldKey` KmsKeyRef, required — Reference to a managed KMS key.
      - `providerId` string, required
      - `keyAlias` string, required
    - `newKey` KmsKeyRef, required — Reference to a managed KMS key.
      - `providerId` string, required
      - `keyAlias` string, required
    - `targetProviderId` string, required
    - `rotatedAssignments` string[]
    - `createdAssignments` string[]
    - `rotationInterval` string, nullable — ISO-8601 duration used for recurring rotation.
    - `rotateAt` string, date-time, nullable
    - `status` 'ACTIVE' | 'ROTATING' | 'ROTATED' | 'REVOKED' | 'DEPRECATED', required — Lifecycle status for a KMS key or rotation record.
    - `createdAt` string, date-time, nullable
    - `updatedAt` string, date-time, nullable
  - `revokedKeys` KmsKeyRef[], required
    - `providerId` string, required
    - `keyAlias` string, required
  - `revokedAssignments` string[], required

## Other responses

- `400` — Bad request due to invalid input parameters or request body.
- `500` — An unexpected error occurred on the server.

## Changes

- **2026-06-26** `f4b160fd91dc` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/sphereon-opensource/apis/kms-rest-server-api/changes/:tenantId/kms/lifecycle/run-due/post.md)

---

[API](https://skmtc.dev/sphereon-opensource/apis/kms-rest-server-api.md) · [All operations](https://skmtc.dev/sphereon-opensource/apis/kms-rest-server-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sphereon-opensource/kms-rest-server-api/revisions/e9136cbde1c1/schema)