Replace oracle managed keys with vault(custom) keys

we will encrypt boot volume oracle managed keys with our vault keys that we have already created.

1. Open Boot volume details page and click on the option Assign next to Encryption key

2. Select created vault & vault key and click on assign

It's clear that we currently lack the necessary permissions to change keys in the volume.

Therefore, our first step should be to create a policy that grants the required permissions.

we got the below error because we don't have permission so click on close and create the policy first then assign the keys.

Next we add this policy

allow service blockstorage to use keys in compartment Hub_compute_and_storage_compartment

Now we will try again to assign vault key in boot volume

Finally, vault key has assigned to boot volume