How-to guides

• Accessing the API

  Access the API from authenticated code platforms.

• Creating symmetric encryption keys

  Create key rings and symmetric encryption keys.

• Creating asymmetric keys

  Create key rings and asymmetric keys for encryption or signing.

• Enabling and disabling key versions

  Enable and disable key versions for use in encryption operations.

• Destroying and restoring key versions

  Destroy and restore key version material.

• Labeling keys

  Organize keys with labels.

• Create and manage tags

  Organize key rings with tags.

• Rotating keys

  Rotate keys automatically and manually.

• Managing Cloud EKM keys

  Learn how to protect your data in Google Cloud using a key that you manage in a supported external key management service, external to Google.

• Encrypting and decrypting content with a symmetric key

  Encrypt and decrypt content using a symmetric key.

• Encrypting and decrypting data with an asymmetric key

  Encrypt and decrypt content using an asymmetric key.

• Creating and validating digital signatures

  Create and validate digital signatures using an asymmetric key.

• Retrieving a public key

  Retrieve the public key portion of an asymmetric key.

• Re-encrypting data

  Re-encrypt content using a new key version.

• Encrypting application data

  Learn about protecting client-side application data before transmitting it over the network.

• Using Cloud HSM

  Learn about and use Cloud HSM.

• Attesting a key

  Attest a key that is created in Cloud HSM.

• Importing a key

  Learn how to import a key into Cloud KMS.

• Formatting keys for import

  Ensure that key material is properly formatted, so that it can be imported into Cloud KMS.

• Importing a wrapped key

  Learn how to import a wrapped key into Cloud KMS.

• Wrapping a key

  Learn how to wrap a key using OpenSSL on Linux.

• Including the Pyca cryptography library

  Update the Google Cloud CLI with the Pyca cryptography library.

• Troubleshooting failed imports

  Learn how to understand and fix problems when your key is not imported successfully.

• Using Cloud KMS with other products

  See how to use Cloud KMS with other Google Cloud products.

• Sorting and filtering list results

  Sort and/or filter the Cloud KMS resources returned by list operations.

• Access control with IAM

  Set up Identity and Access Management roles and permissions to secure your Cloud KMS resources.

• Using Cloud Audit Logs

  Set up Cloud Audit Logs for Cloud KMS.

• Using gRPC

  Learn how to route gRPC calls to the appropriate region for your Cloud KMS resources.

• Using Cloud Monitoring

  Monitor and set up alerts for Cloud KMS resources, such as key versions.