Skip to main content
Google Cloud Documentation
Documentation Technology areas
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Generative AI
  • Industry solutions
  • Networking
  • Observability and monitoring
  • Security
  • Storage
Cross-product tools
  • Access and resources management
  • Costs and usage management
  • Google Cloud SDK, languages, frameworks, and tools
  • Infrastructure as code
  • Migration
/
Console
  • English
  • Deutsch
  • Español
  • Español – América Latina
  • Français
  • Indonesia
  • Italiano
  • Português
  • Português – Brasil
  • 中文 – 简体
  • 中文 – 繁體
  • 日本語
  • 한국어
Sign in
  • Cloud KMS
Start free
Overview Guides Reference Samples Resources
Google Cloud Documentation
  • Documentation
    • Overview
    • Guides
    • Reference
    • Samples
    • Resources
  • Technology areas
    • More
  • Cross-product tools
    • More
  • Console
  • Cloud KMS
  • All APIs & references
  • API client libraries
  • PKCS #11 library
    • Overview
    • Use OpenSSL
    • Apache TLS termination
    • NGINX TLS offload
    • Use pkcs11-tool
    • Sign Windows artifacts with Jsign
  • Windows CNG Provider
    • Overview
    • Signing Windows artifacts
  • Permissions and roles
  • Cloud EKM error reference
  • Overview
  • KMS REST reference
    • Overview
    • v1
      • REST Resources
      • folders
        • Overview
        • getAutokeyConfig
        • getKajPolicyConfig
        • updateAutokeyConfig
        • updateKajPolicyConfig
      • organizations
        • Overview
        • getKajPolicyConfig
        • updateKajPolicyConfig
      • projects
        • Overview
        • getAutokeyConfig
        • getKajPolicyConfig
        • showEffectiveAutokeyConfig
        • showEffectiveKeyAccessJustificationsEnrollmentConfig
        • showEffectiveKeyAccessJustificationsPolicyConfig
        • updateAutokeyConfig
        • updateKajPolicyConfig
      • projects.locations
        • Overview
        • generateRandomBytes
        • get
        • getEkmConfig
        • list
        • updateEkmConfig
      • projects.locations.ekmConfig
        • Overview
        • getIamPolicy
        • setIamPolicy
        • testIamPermissions
      • projects.locations.ekmConnections
        • Overview
        • create
        • get
        • getIamPolicy
        • list
        • patch
        • setIamPolicy
        • testIamPermissions
        • verifyConnectivity
      • projects.locations.keyHandles
        • Overview
        • create
        • get
        • list
      • projects.locations.keyRings
        • Overview
        • create
        • get
        • getIamPolicy
        • list
        • setIamPolicy
        • testIamPermissions
      • projects.locations.keyRings.cryptoKeys
        • Overview
        • create
        • decrypt
        • encrypt
        • get
        • getIamPolicy
        • list
        • patch
        • setIamPolicy
        • testIamPermissions
        • updatePrimaryVersion
      • projects.locations.keyRings.cryptoKeys.cryptoKeyVersions
        • Overview
        • asymmetricDecrypt
        • asymmetricSign
        • create
        • decapsulate
        • destroy
        • get
        • getPublicKey
        • import
        • list
        • macSign
        • macVerify
        • patch
        • rawDecrypt
        • rawEncrypt
        • restore
      • projects.locations.keyRings.importJobs
        • Overview
        • create
        • get
        • getIamPolicy
        • list
        • setIamPolicy
        • testIamPermissions
      • projects.locations.operations
        • Overview
        • get
      • Types
      • AutokeyConfig
      • CryptoKeyVersionAlgorithm
      • CryptoKeyVersionView
      • EkmConfig
      • GetPolicyOptions
      • KeyAccessJustificationsPolicyConfig
      • KeyOperationAttestation
      • Location
      • Policy
      • ProtectionLevel
      • TestIamPermissionsResponse
  • KMS Inventory REST reference
    • Overview
    • v1
      • REST Resources
      • organizations.protectedResources
        • Overview
        • search
      • projects.cryptoKeys
        • Overview
        • list
      • projects.locations.keyRings.cryptoKeys
        • Overview
        • getProtectedResourcesSummary
  • KMS RPC reference
    • Overview
    • google.cloud.kms.v1
    • google.cloud.location
    • google.iam.v1
    • google.longrunning
    • google.rpc
    • google.type
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Generative AI
  • Industry solutions
  • Networking
  • Observability and monitoring
  • Security
  • Storage
  • Access and resources management
  • Costs and usage management
  • Google Cloud SDK, languages, frameworks, and tools
  • Infrastructure as code
  • Migration
  • Home
  • Documentation
  • Security
  • Cloud KMS
  • Reference

APIs & reference
Stay organized with collections Save and categorize content based on your preferences.

  • API client libraries

    Discover SDKs and client libraries for programmatic access to the Cloud Key Management Service API.

  • PKCS #11 library

    Invoke Cloud KMS using the PKCS #11 API.

  • Service APIs

    Write your own client code for Cloud Key Management Service API using its REST and RPC APIs.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

  • Products and pricing

    • See all products
    • Google Cloud pricing
    • Google Cloud Marketplace
    • Contact sales
  • Support

    • Google Cloud Community
    • Support
    • Release Notes
    • System status
  • Resources

    • GitHub
    • Getting Started with Google Cloud
    • Code samples
    • Cloud Architecture Center
    • Training and Certification
  • Engage

    • Blog
    • Events
    • X (Twitter)
    • Google Cloud on YouTube
    • Google Cloud Tech on YouTube
  • About Google
  • Privacy
  • Site terms
  • Google Cloud terms
  • Manage cookies
  • Our third decade of climate action: join us
  • Sign up for the Google Cloud newsletter Subscribe
  • English
  • Deutsch
  • Español
  • Español – América Latina
  • Français
  • Indonesia
  • Italiano
  • Português
  • Português – Brasil
  • 中文 – 简体
  • 中文 – 繁體
  • 日本語
  • 한국어