HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/394/help/man/man1/gcloud_kms_keys_versions_update.1
.TH "GCLOUD_KMS_KEYS_VERSIONS_UPDATE" 1



.SH "NAME"
.HP
gcloud kms keys versions update \- update a key version



.SH "SYNOPSIS"
.HP
\f5gcloud kms keys versions update\fR \fIVERSION\fR [\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR] [\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR] [\fB\-\-key\fR=\fIKEY\fR] [\fB\-\-keyring\fR=\fIKEYRING\fR] [\fB\-\-location\fR=\fILOCATION\fR] [\fB\-\-state\fR=\fISTATE\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

gcloud kms keys versions update can be used to update the key versions. Updates
can be made to the the key versions's state (enabling or disabling it), to its
external key URI (if the key version has protection level EXTERNAL), or to its
ekm connection key path (if the key version has protection level EXTERNAL_VPC).



.SH "EXAMPLES"

The following command enables the key version 8 of key \f5frodo\fR within
keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \-\-state=enabled
.RE

The following command disables the key version 8 of key \f5frodo\fR within
keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \-\-state=disabled
.RE

The following command updates the external key URI of version 8 of key
\f5frodo\fR within keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=frodo \e
    \-\-external\-key\-uri=https://example.kms/v0/some/key/path
.RE

The following command updates the ekm connection key path of version 8 of key
\f5bilbo\fR within keyring \f5fellowship\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud kms keys versions update 8 \-\-location=us\-east1 \e
    \-\-keyring=fellowship \-\-key=bilbo \e
    \-\-ekm\-connection\-key\-path=v0/some/key/path
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fIVERSION\fR

Name of the version to describe.


.RE
.sp

.SH "FLAGS"

.RS 2m
.TP 2m
\fB\-\-ekm\-connection\-key\-path\fR=\fIEKM_CONNECTION_KEY_PATH\fR

The path to the external key material on the EKM for keys with protection level
"external\-vpc".

.TP 2m
\fB\-\-external\-key\-uri\fR=\fIEXTERNAL_KEY_URI\fR

The URI of the external key for keys with protection level "external".

.TP 2m
\fB\-\-key\fR=\fIKEY\fR

The containing key.

.TP 2m
\fB\-\-keyring\fR=\fIKEYRING\fR

Key ring of the key.

.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

Location of the keyring.

.TP 2m
\fB\-\-state\fR=\fISTATE\fR

State of the key version.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha kms keys versions update
.RE

.RS 2m
$ gcloud beta kms keys versions update
.RE