- In the AWS console, go to Key Management Service (KMS) and click the Create Key button. Configure the key in the following way:
- Key type: Asymmetric
- Key usage: Sign and verify
- Key spec: ECC_SECG_P256K1
- Advanced options: External (Import Key material)
-
Click the Next button to go through the configuration of the labels, administrative and usage permissions, to finally click the Finish button at the end of the process.
-
Select your Key spec and Wrapping algorithm or leave the default settings and click the Download wrapping public key and import token button. It will download a zip file with
ImportToken.bin,README.txtandWrappingPublicKey.binfiles in it.