gcloud beta kms keys versions import-trusted-key-wrapped

NAME

gcloud beta kms keys versions import-trusted-key-wrapped - import a trusted key wrapped CryptoKeyVersion

SYNOPSIS

gcloud beta kms keys versions import-trusted-key-wrapped --algorithm=ALGORITHM --importing-key-version=IMPORTING_KEY_VERSION [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [--version=VERSION] [--wrapped-key-file=WRAPPED_KEY_FILE] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(BETA) Imports a trusted key wrapped version.

EXAMPLES

The following command imports a key into version 1 of frodo:

gcloud beta kms keys versions import-trusted-key-wrapped --version=1 --key=frodo --keyring=fellowship --location=us-east1 --importing-key-version=projects/my-project/locations/us-east1/keyRings/fellowship/cryptoKeys/samwise/cryptoKeyVersions/1 --algorithm=aes-256-gcm --wrapped-key-file=/tmp/my/wrapped_key.file

REQUIRED FLAGS

--algorithm=ALGORITHM

The algorithm to assign to the new key version. For more information about supported algorithms, see https://cloud.google.com/kms/docs/algorithms. ALGORITHM must be one of: aes-128-cbc, aes-128-ctr, aes-128-gcm, aes-256-cbc, aes-256-ctr, aes-256-gcm, aes-256-kwp, ec-sign-ed25519, ec-sign-p256-sha256, ec-sign-p384-sha384, ec-sign-secp256k1-sha256, google-symmetric-encryption, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384, hmac-sha512, kem-xwing, ml-kem-1024, ml-kem-768, pq-sign-hash-slh-dsa-sha2-128s-sha256, pq-sign-ml-dsa-44, pq-sign-ml-dsa-44-external-mu, pq-sign-ml-dsa-65, pq-sign-ml-dsa-65-external-mu, pq-sign-ml-dsa-87, pq-sign-ml-dsa-87-external-mu, pq-sign-slh-dsa-sha2-128s, rsa-decrypt-oaep-2048-sha1, rsa-decrypt-oaep-2048-sha256, rsa-decrypt-oaep-3072-sha1, rsa-decrypt-oaep-3072-sha256, rsa-decrypt-oaep-4096-sha1, rsa-decrypt-oaep-4096-sha256, rsa-decrypt-oaep-4096-sha512, rsa-sign-pkcs1-2048-sha256, rsa-sign-pkcs1-3072-sha256, rsa-sign-pkcs1-4096-sha256, rsa-sign-pkcs1-4096-sha512, rsa-sign-pss-2048-sha256, rsa-sign-pss-3072-sha256, rsa-sign-pss-4096-sha256, rsa-sign-pss-4096-sha512, rsa-sign-raw-pkcs1-2048, rsa-sign-raw-pkcs1-3072, rsa-sign-raw-pkcs1-4096.

--importing-key-version=IMPORTING_KEY_VERSION

The resource name of the CryptoKeyVersion to use as an importing key.

OPTIONAL FLAGS

--key=KEY

The containing key to import into.

--keyring=KEYRING

Key ring of the key.

--location=LOCATION

Location of the keyring.

--version=VERSION

Version to re-import into. Omit this field for first-time import.

--wrapped-key-file=WRAPPED_KEY_FILE

Path to the RSA/RSA+AES wrapped key file to import.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in beta and might change without notice. These variants are also available:

gcloud kms keys versions import-trusted-key-wrapped

gcloud alpha kms keys versions import-trusted-key-wrapped