# Verify encryption configuration

Checks stored KMS settings without changing the configuration. A completed check returns ok=false on KMS failure. Legacy Vault configurations return ok=true without a KMS check.

Required permission: Account > Admin > Encryption > Read

**Path parameters:**

{object}
- `encryptionConfigurationId`: (string) (required) Name-derived ID of the encryption configuration.

**Response body:**

{object}
- `data`: {object}
  - `ok`: (boolean) (required)
  - `keyRef`: (string) KMS key reference, when available.
  - `error`: (string) A safe validation failure summary.

## API reference

POST /v1/encryption/configurations/{encryptionConfigurationId}/verify

POST /v1/teams/{teamId}/encryption/configurations/{encryptionConfigurationId}/verify

### Example Response

200 OK: Stored configuration verification result.

```json
undefined
```

## CLI reference

$ northflank verify encryption configuration

Options:

- `--encryptionConfigurationId <encryptionConfigurationId>`: Name-derived ID of the encryption configuration.

- `--verbose `: Verbose output

- `--quiet `: No console output

- `-o --output <format>`: Output formatting 

### Example Response

 Stored configuration verification result.

```json
undefined
```

## JavaScript client reference

### Example request



```javascript
await apiClient.verify.encryption.configuration({
  parameters: {
    "encryptionConfigurationId": "production-kms"
  }
});
```

### Example Response

 Stored configuration verification result.

```json
{
  "rawResponse": "...",
  "request": "...",
  "error": "..."
}
```

Previous: [Update encryption configuration settings](/docs/v1/api/team/encryption-configurations/update-encryption-configuration-settings)

Next: [Enable Northflank-managed envelope encryption](/docs/v1/api/team/encryption-configurations/enable-northflank-managed-envelope-encryption)