HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/394/help/man/man1/gcloud_beta_sql_import_tde.1
.TH "GCLOUD_BETA_SQL_IMPORT_TDE" 1



.SH "NAME"
.HP
gcloud beta sql import tde \- import TDE certificate into a Cloud SQL for SQL Server instance



.SH "SYNOPSIS"
.HP
\f5gcloud beta sql import tde\fR \fIINSTANCE\fR (\fB\-\-cert\-path\fR=\fICERT_PATH\fR\ \fB\-\-certificate\fR=\fICERTIFICATE\fR\ \fB\-\-pvk\-path\fR=\fIPVK_PATH\fR\ (\fB\-\-prompt\-for\-pvk\-password\fR\ |\ \fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR)) [\fB\-\-async\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(BETA)\fR gcloud beta sql import tde imports a TDE certificate into a Cloud
SQL instance from a certificate file in Google Cloud Storage.

For detailed help on importing data into Cloud SQL, refer to this guide:
https://cloud.google.com/sql/docs/sqlserver/import\-export/importing



.SH "EXAMPLES"

To import a TDE certificate with the name \f5foo\fR and certificate path
\f5my\-bucket/my\-cert.cert\fR and private key path \f5my\-bucket/my\-key.pvk\fR
and pvk password \f5my\-pvk\-password\fR into the Cloud SQL instance
\f5my\-instance\fR, run:

.RS 2m
$ gcloud beta sql import tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \e
    \-\-pvk\-password=my\-pvk\-password
.RE

To import a TDE certificate with the name \f5foo\fR and certificate path
\f5my\-bucket/my\-cert.cert\fR and private key path \f5my\-bucket/my\-key.pvk\fR
into the Cloud SQL instance \f5my\-instance\fR and prompting for the private key
password, run:

.RS 2m
$ gcloud beta sql import tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \-\-prompt\-for\-pvk\-password
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fIINSTANCE\fR

Cloud SQL instance ID.


.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Encryption info to support importing a TDE certificate file

This must be specified.


.RS 2m
.TP 2m
\fB\-\-cert\-path\fR=\fICERT_PATH\fR

Path to the encryption certificate file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-certificate\fR=\fICERTIFICATE\fR

Name of the encryption certificate.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-pvk\-path\fR=\fIPVK_PATH\fR

Path to the encryption private key file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-prompt\-for\-pvk\-password\fR

Prompt for the private key password associated with the certificate file with
character echo disabled. The password is all typed characters up to but not
including the RETURN or ENTER key.

.TP 2m
\fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR

The private key password associated with the certificate file.


.RE
.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in beta and might change without notice. These
variants are also available:

.RS 2m
$ gcloud sql import tde
.RE

.RS 2m
$ gcloud alpha sql import tde
.RE