---
title: "Releases a key."
method: POST
path: "/keys/{key-name}/{key-version}/release"
---

# Releases a key.

`POST /keys/{key-name}/{key-version}/release`

The release key operation is applicable to all key types. The target key must be marked exportable. This operation requires the keys/release permission.

## Path parameters

- `key-name` string, required
- `key-version` string, required

## Query parameters

- `api-version` string, required

## Request body

- KeyReleaseParameters — The release key parameters.
  - `target` string, required — The attestation assertion for the target of the key release.
  - `nonce` string — A client provided nonce for freshness.
  - `enc` 'CKM_RSA_AES_KEY_WRAP' | 'RSA_AES_KEY_WRAP_256' | 'RSA_AES_KEY_WRAP_384' — The encryption algorithm to use to protected the exported key material

## Response `200`

The request has succeeded.

- KeyReleaseResult — The release result, containing the released key.
  - `value` string — A signed object containing the released key.

## Other responses

- `default` — An unexpected error response.

---

[API](https://skmtc.net/azure/apis/keyvault-keys.md) · [All operations](https://skmtc.net/azure/apis/keyvault-keys/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/keyvault-keys/revisions/7bedded21050/schema)