How-to guides

• Accessing the API

  Access the API from authenticated code platforms.

• Creating symmetric keys

  Create key rings and symmetric keys.

• Creating asymmetric keys

  Create key rings and asymmetric keys.

• Enabling and disabling key versions

  Enable and disable key versions for use in encryption operations.

• Destroying and restoring key versions

  Destroy and restore key version material.

• Labeling keys

  Organize keys with labels.

• Rotating keys

  Rotate keys automatically and manually.

• Encrypting and decrypting content with a symmetric key

  Encrypt and decrypt content using a Cloud KMS symmetric key.

• Encrypting and decrypting data with an asymmetric key

  Encrypt and decrypt content using a Cloud KMS asymmetric key.

• Creating and validating digital signatures

  Create and validate digital signatures using a Cloud KMS asymmetric key.

• Retrieving a public key

  Retrieve the public key portion of a Cloud KMS asymmetric key.

• Re-encrypting data

  Re-encrypt content using a new key version.

• Storing secrets

  Store secrets encrypted with Cloud KMS.

• Using Cloud HSM

  Learn about and use Cloud HSM.

• Attesting a key

  Attest a key that is created in Cloud HSM.

• Importing a raw key

  Learn how to import a raw key into Cloud KMS.

• Importing a wrapped key

  Learn how to import a wrapped key into Cloud KMS.

• Wrapping a key

  Learn how to wrap a key using OpenSSL on Linux.

• Including the Pyca cryptography library

  Update the gcloud command-line tool with the Pyca cryptography library.

• Using Cloud KMS with other products

  See how to use Cloud KMS with other Google Cloud Platform products.

• Sorting and filtering list results

  Sort and/or filter the Cloud KMS resources returned by list operations.

• Using IAM

  Set up IAM roles and permissions to secure your Cloud KMS resources.

• Using Cloud Audit Logging

  Set up Cloud Audit Logging for Cloud KMS.

• Using gRPC

  Learn how to route gRPC calls to the appropriate region for your Cloud KMS resources.

• Using Stackdriver Monitoring

  Monitor and set up alerts for Cloud KMS resources, e.g., key versions.

• Base64 encoding and decoding

  Base64 encode or decode data for use with Cloud KMS.