Query: ibm_kms_key_dual_auth_status

select
  case when dual_auth_delete ->> 'enabled' = 'true'  then 'enabled' else 'disabled' end as status,
  count(*)
from
  ibm_kms_key
where
  state <> '5'
group by
  status;