Migrate GCP Cloud Kms key from single region to multi regional - Stack Overflow

admin管理员组

文章数量:1128019

i have a key created in a GCP project using Cloud Kms, i use it to encrypt some data but at the time it was created it was done on a single region and now i would want to make it multi regional.

Is this possible to do without having to create a brand new key and re-encrypt everything again?

I tried searching for a way to export the key in order to upload it again as multi regional but was unable to find a way to do it.

i have a key created in a GCP project using Cloud Kms, i use it to encrypt some data but at the time it was created it was done on a single region and now i would want to make it multi regional.

Is this possible to do without having to create a brand new key and re-encrypt everything again?

I tried searching for a way to export the key in order to upload it again as multi regional but was unable to find a way to do it.

• google-cloud-platform
• google-cloud-kms

Share Improve this question Follow asked Jan 8 at 15:44 liquid_millerliquid_miller 311 bronze badge New contributor liquid_miller is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.

Add a comment  | 

2 Answers 2

Sorted by: Reset to default 0

I don't see an alternative to creating a new key and re-encrypting if you want to change the regional availability of your key. There's no key export nor is there such a migration feature.

It is not possible to migrate an existing single-region Cloud KMS key to a multi-regional configuration without creating a new key and re-encrypting the data. This is due to the security policies and the fixed regionality property of the keys. It is not explicitly mentioned in the docs, but somewhere in the creation process, there are detailed instructions about this.

本文标签： Migrate GCP Cloud Kms key from single region to multi regionalStack Overflow