.TH "GCLOUD_ALPHA_SQL_IMPORT_TDE" 1



.SH "NAME"
.HP
gcloud alpha sql import tde \- import TDE certificate into a Cloud SQL for SQL Server instance



.SH "SYNOPSIS"
.HP
\f5gcloud alpha sql import tde\fR \fIINSTANCE\fR (\fB\-\-cert\-path\fR=\fICERT_PATH\fR\ \fB\-\-certificate\fR=\fICERTIFICATE\fR\ \fB\-\-pvk\-path\fR=\fIPVK_PATH\fR\ (\fB\-\-prompt\-for\-pvk\-password\fR\ |\ \fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR)) [\fB\-\-async\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR gcloud alpha sql import tde imports a TDE certificate into a Cloud
SQL instance from a certificate file in Google Cloud Storage.

For detailed help on importing data into Cloud SQL, refer to this guide:
https://cloud.google.com/sql/docs/sqlserver/import\-export/importing



.SH "EXAMPLES"

To import a TDE certificate with the name \f5foo\fR and certificate path
\f5my\-bucket/my\-cert.cert\fR and private key path \f5my\-bucket/my\-key.pvk\fR
and pvk password \f5my\-pvk\-password\fR into the Cloud SQL instance
\f5my\-instance\fR, run:

.RS 2m
$ gcloud alpha sql import tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \e
    \-\-pvk\-password=my\-pvk\-password
.RE

To import a TDE certificate with the name \f5foo\fR and certificate path
\f5my\-bucket/my\-cert.cert\fR and private key path \f5my\-bucket/my\-key.pvk\fR
into the Cloud SQL instance \f5my\-instance\fR and prompting for the private key
password, run:

.RS 2m
$ gcloud alpha sql import tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \-\-prompt\-for\-pvk\-password
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fIINSTANCE\fR

Cloud SQL instance ID.


.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Encryption info to support importing a TDE certificate file

This must be specified.


.RS 2m
.TP 2m
\fB\-\-cert\-path\fR=\fICERT_PATH\fR

Path to the encryption certificate file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-certificate\fR=\fICERTIFICATE\fR

Name of the encryption certificate.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-pvk\-path\fR=\fIPVK_PATH\fR

Path to the encryption private key file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-prompt\-for\-pvk\-password\fR

Prompt for the private key password associated with the certificate file with
character echo disabled. The password is all typed characters up to but not
including the RETURN or ENTER key.

.TP 2m
\fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR

The private key password associated with the certificate file.


.RE
.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. These variants are also available:

.RS 2m
$ gcloud sql import tde
.RE

.RS 2m
$ gcloud beta sql import tde
.RE