---
title: "Create a software KMS provider"
method: POST
path: "/tenants/{tenantId}/kms/providers"
tags: ["KmsProviders"]
---

# Create a software KMS provider

`POST /tenants/{tenantId}/kms/providers`

Adds a software KMS provider to a tenant. You supply an identifier and optional settings; key storage and protection are managed for you, so no filesystem paths or secrets are accepted. The provider becomes available to the tenant immediately. Only the `software` provider type is supported today.

## Parameters

- `./platform-config-components.yml#/components/parameters/TenantId` — unresolved $ref

## Request body

- CreateKmsProviderRequest — unresolved $ref

## Response `201`

Created KMS provider.

- KmsProvider — unresolved $ref

## Other responses

- `400` — unresolved $ref
- `401` — unresolved $ref
- `403` — unresolved $ref

## Changes

- **2026-06-17** `f39de1a395fb` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/sphereon-opensource/apis/platform-config-api/changes/tenants/:tenantId/kms/providers/post.md)

---

[API](https://skmtc.dev/sphereon-opensource/apis/platform-config-api.md) · [All operations](https://skmtc.dev/sphereon-opensource/apis/platform-config-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sphereon-opensource/platform-config-api/revisions/f0066c61ebdb/schema)