pbs_tape_key_delete
Delete a PBS tape encryption key. Use dry-run to view metadata; confirm to permanently remove the key, making tapes encrypted with it unreadable.
Instructions
MUTATION: delete a PBS tape encryption key.
RISK_HIGH: TAPES ENCRYPTED WITH THIS KEY BECOME UNREADABLE WITHOUT IT — PBS's own description, verbatim: "you can no longer access tapes using this key." No undo unless the key material was separately exported/backed up outside PBS. Dry-run by default (captures current public metadata); confirm=True executes (DELETE /config/tape-encryption-keys/{fingerprint}, synchronous — PBS returns null) and returns {"status": "ok", "result": None}. Needs PROXIMO_PBS_* config.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| digest | No | Optimistic-lock: 64-char lowercase hex SHA-256 of the config PBS last returned. | |
| confirm | No | False (default) returns a dry-run PLAN only; True executes the deletion. | |
| fingerprint | Yes | Fingerprint of the tape encryption key to delete. | |
| proximo_target | No | Which configured Proxmox target to run this call against — a target name from your multi-target config (a specific PVE/PBS/PMG/PDM box). Omit to use the single/default target from the environment; the selection applies only to this call. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |