How-to guides

• Accessing the API

  Access the API from authenticated code platforms.

• Creating symmetric keys

  Create key rings and symmetric keys.

• Creating asymmetric keys

  Create key rings and asymmetric keys.

• Enabling and disabling key versions

  Enable and disable key versions for use in encryption operations.

• Destroying and restoring key versions

  Destroy and restore key version material.

• Labeling keys

  Organize keys with labels.

• Rotating keys

  Rotate keys automatically and manually.

• Encrypting and decrypting content with a symmetric key

  Encrypt and decrypt content using a Cloud KMS symmetric key.

• Encrypting and decrypting data with an asymmetric key

  Encrypt and decrypt content using a Cloud KMS asymmetric key.

• Creating and validating digital signatures

  Create and validate digital signatures using a Cloud KMS asymmetric key.

• Retrieving a public key

  Retrieve the public key portion of a Cloud KMS asymmetric key.

• Re-encrypting data

  Re-encrypt content using a new key version.

• Storing secrets

  Store secrets encrypted with Cloud KMS.

• Using Cloud HSM

  Learn about and use Cloud HSM.

• Attesting a key

  Attest a key that is created in Cloud HSM.

• Using Cloud KMS with other products

  See how to use Cloud KMS with other Google Cloud Platform products.

• Using IAM

  Set up IAM roles and permissions to secure your Cloud KMS resources.

• Using Cloud Audit Logging

  Set up Cloud Audit Logging for Cloud KMS.

• Using gRPC

  Learn how to route gRPC calls to the appropriate region for your Cloud KMS resources.

• Using Stackdriver Monitoring

  Monitor and set up alerts for Cloud KMS resources, e.g., key versions.