HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/394/help/man/man1/gcloud_beta_kms_keys_versions_update.1
.TH "GCLOUD_BETA_KMS_KEYS_VERSIONS_UPDATE" 1



.SH "NAME"
.HP
gcloud beta kms keys versions update \- update a key version



.SH "SYNOPSIS"
.HP
\f5gcloud beta kms keys versions update\fR \fIVERSION\fR [\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR] [\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR] [\fB\-\-key\fR=\fIKEY\fR] [\fB\-\-keyring\fR=\fIKEYRING\fR] [\fB\-\-location\fR=\fILOCATION\fR] [\fB\-\-state\fR=\fISTATE\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(BETA)\fR gcloud beta kms keys versions update can be used to update the key
versions. Updates can be made to the the key versions's state (enabling or
disabling it), to its external key URI (if the key version has protection level
EXTERNAL), or to its ekm connection key path (if the key version has protection
level EXTERNAL_VPC).



.SH "EXAMPLES"

The following command enables the key version 8 of key \f5frodo\fR within
keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud beta kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \-\-state=enabled
.RE

The following command disables the key version 8 of key \f5frodo\fR within
keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud beta kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \-\-state=disabled
.RE

The following command updates the external key URI of version 8 of key
\f5frodo\fR within keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud beta kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \e
    \-\-external\-key\-uri=https://example.kms/v0/some/key/path
.RE

The following command updates the ekm connection key path of version 8 of key
\f5bilbo\fR within keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud beta kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=bilbo \e
    \-\-ekm\-connection\-key\-path=v0/some/key/path
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fIVERSION\fR

Name of the version to describe.


.RE
.sp

.SH "FLAGS"

.RS 2m
.TP 2m
\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR

The path to the external key material on the EKM for keys with protection level
"external\-vpc".

.TP 2m
\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR

The URI of the external key for keys with protection level "external".

.TP 2m
\fB\-\-key\fR=\fIKEY\fR

The containing key.

.TP 2m
\fB\-\-keyring\fR=\fIKEYRING\fR

Key ring of the key.

.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

Location of the keyring.

.TP 2m
\fB\-\-state\fR=\fISTATE\fR

State of the key version.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in beta and might change without notice. These
variants are also available:

.RS 2m
$ gcloud kms keys versions update
.RE

.RS 2m
$ gcloud alpha kms keys versions update
.RE