.TH "GCLOUD_BETA_SQL_EXPORT_TDE" 1



.SH "NAME"
.HP
gcloud beta sql export tde \- export a TDE certificate from a Cloud SQL for SQL Server instance



.SH "SYNOPSIS"
.HP
\f5gcloud beta sql export tde\fR \fIINSTANCE\fR (\fB\-\-cert\-path\fR=\fICERT_PATH\fR\ \fB\-\-certificate\fR=\fICERTIFICATE\fR\ \fB\-\-pvk\-path\fR=\fIPVK_PATH\fR\ (\fB\-\-prompt\-for\-pvk\-password\fR\ |\ \fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR)) [\fB\-\-async\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(BETA)\fR Exports a TDE certificate from a Cloud SQL instance to a Google
Cloud Storage bucket. This is only supported for SQL Server.



.SH "EXAMPLES"

To export a TDE certificate with the name \f5foo\fR and private key password
\f5my\-pvk\-password\fR in the Cloud SQL instance \f5my\-instance\fR to
certificate path \f5my\-bucket/my\-cert.cert\fR and private key path
\f5my\-bucket/my\-key.pvk\fR, run:

.RS 2m
$ gcloud beta sql export tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \e
    \-\-pvk\-password=my\-pvk\-password
.RE

To export a TDE certificate with the name \f5foo\fR and private key password
\f5my\-pvk\-password\fR in the Cloud SQL instance \f5my\-instance\fR and
prompting for the private key password, run:

.RS 2m
$ gcloud beta sql export tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \-\-prompt\-for\-pvk\-password
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fIINSTANCE\fR

Cloud SQL instance ID.


.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Encryption info to support importing a TDE certificate file

This must be specified.


.RS 2m
.TP 2m
\fB\-\-cert\-path\fR=\fICERT_PATH\fR

Path to the encryption certificate file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-certificate\fR=\fICERTIFICATE\fR

Name of the encryption certificate.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-pvk\-path\fR=\fIPVK_PATH\fR

Path to the encryption private key file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-prompt\-for\-pvk\-password\fR

Prompt for the private key password associated with the certificate file with
character echo disabled. The password is all typed characters up to but not
including the RETURN or ENTER key.

.TP 2m
\fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR

The private key password associated with the certificate file.


.RE
.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This command is currently in beta and might change without notice. These
variants are also available:

.RS 2m
$ gcloud sql export tde
.RE

.RS 2m
$ gcloud alpha sql export tde
.RE