HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/current/help/man/man1/gcloud_kms_ekm-config_update.1
.TH "GCLOUD_KMS_EKM\-CONFIG_UPDATE" 1



.SH "NAME"
.HP
gcloud kms ekm\-config update \- update the EkmConfig



.SH "SYNOPSIS"
.HP
\f5gcloud kms ekm\-config update\fR \fB\-\-location\fR=\fILOCATION\fR [\fB\-\-default\-ekm\-connection\fR=\fIDEFAULT_EKM_CONNECTION\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

gcloud kms ekm\-config update can be used to update the EkmConfig. Applies to
all CryptoKeys and CryptoKeyVersions with a \f5protection level\fR of
\f5external vpc\fR.



.SH "EXAMPLES"

The following command sets the default ekm\-connection to \f5laplace\fR for its
project \f5foo\fR and location \f5us\-east1\fR:

.RS 2m
$ gcloud kms ekm\-config update \-\-location=us\-east1 \e
    \-\-default\-ekm\-connection="projects/foo/locations/us\-east1/ekmCon\e
nections/laplace"
.RE

The following command removes the default\-ekm\-connection in \f5us\-east1\fR
for the current project:

.RS 2m
$ gcloud kms ekm\-config update \-\-location=us\-east1 \e
    \-\-default\-ekm\-connection=""
.RE



.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Location resource \- The KMS location resource. This represents a Cloud
resource. (NOTE) Some attributes are not given arguments in this group but can
be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5\-\-location\fR on the command line with a fully
specified name;
.IP "\(em" 2m
set the property \f5core/project\fR.
.RE
.sp

This must be specified.


.RS 2m
.TP 2m
\fB\-\-location\fR=\fILOCATION\fR

ID of the location or fully qualified identifier for the location.

To set the \f5location\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5\-\-location\fR on the command line.
.RE
.sp


.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-default\-ekm\-connection\fR=\fIDEFAULT_EKM_CONNECTION\fR

The resource name of the EkmConnection to be used as the default EkmConnection
for all \f5external\-vpc\fR CryptoKeys in a project and location. Can be an
empty string to remove the default EkmConnection.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha kms ekm\-config update
.RE

.RS 2m
$ gcloud beta kms ekm\-config update
.RE