Adding a Version to a Google Cloud Key
Use the post /v1/cckm/google/keys/{id}/versions
API to add a new key version to a symmetric or asymmetric Google Cloud key with the given ID. Specify whether the version will be created natively on Google Cloud or uploaded from an external key source.
Syntax
Here, {id}
represents the resource ID of the Google Cloud key on the CipherTrust Manager.
Request Parameters
Parameter | Type | Description |
---|---|---|
AUTHTOKEN | string | Authorization token. |
is_native | boolean | Whether to create the version natively on Google Cloud or upload from an external key source. • Specify true for a native key version.• When is_native is false , the key version will be uploaded from an external key source. Specify details of the key source in source_key_id and source_key_tier described below. |
algorithm | string | Algorithm for the Google Cloud key version. The supported algorithms are: • RSA_SIGN_PSS_2048_SHA256 • RSA_SIGN_PSS_3072_SHA256 • RSA_SIGN_PSS_4096_SHA256 • RSA_SIGN_PSS_4096_SHA512 • RSA_SIGN_PKCS1_2048_SHA256 • RSA_SIGN_PKCS1_3072_SHA256 • RSA_SIGN_PKCS1_4096_SHA256 • RSA_SIGN_PKCS1_4096_SHA512 • RSA_DECRYPT_OAEP_2048_SHA256 • RSA_DECRYPT_OAEP_3072_SHA256 • RSA_DECRYPT_OAEP_4096_SHA256 • RSA_DECRYPT_OAEP_4096_SHA512 • EC_SIGN_P256_SHA256 • EC_SIGN_P384_SHA384 • EC_SIGN_SECP256K1_SHA256 (Only for protection level, HSM) • GOOGLE_SYMMETRIC_ENCRYPTION • HMAC_SHA256 |
source_key_id | string | ID of the key that will be uploaded from an external key source. |
source_key_tier | string | Key source from where the key will be uploaded. The options can be: • local : CipherTrust Manager• external-cm : External CipherTrust Manager• dsm : DSM• hsm-luna : Luna HSM (FM-enabled Luna HSM is not supported as a key source) |
Example Request
Example Response
The sample output displays that the new version of the Google Cloud key with the ID ecc73bfb-7605-4263-abb8-84fe431d35fb
is "version": 2,
.
Response Codes
Response Code | Description |
---|---|
2xx | Success |
4xx | Client errors |
5xx | Server errors |
Refer to HTTP status codes for details.