.TH "GCLOUD_SQL_IMPORT_TDE" 1



.SH "NAME"
.HP
gcloud sql import tde \- import TDE certificate into a Cloud SQL for SQL Server instance



.SH "SYNOPSIS"
.HP
\f5gcloud sql import tde\fR \fIINSTANCE\fR (\fB\-\-cert\-path\fR=\fICERT_PATH\fR\ \fB\-\-certificate\fR=\fICERTIFICATE\fR\ \fB\-\-pvk\-path\fR=\fIPVK_PATH\fR\ (\fB\-\-prompt\-for\-pvk\-password\fR\ |\ \fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR)) [\fB\-\-async\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

gcloud sql import tde imports a TDE certificate into a Cloud SQL instance from a
certificate file in Google Cloud Storage.

For detailed help on importing data into Cloud SQL, refer to this guide:
https://cloud.google.com/sql/docs/sqlserver/import\-export/importing



.SH "EXAMPLES"

To import a TDE certificate with the name \f5foo\fR and certificate path
\f5my\-bucket/my\-cert.cert\fR and private key path \f5my\-bucket/my\-key.pvk\fR
and pvk password \f5my\-pvk\-password\fR into the Cloud SQL instance
\f5my\-instance\fR, run:

.RS 2m
$ gcloud sql import tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \e
    \-\-pvk\-password=my\-pvk\-password
.RE

To import a TDE certificate with the name \f5foo\fR and certificate path
\f5my\-bucket/my\-cert.cert\fR and private key path \f5my\-bucket/my\-key.pvk\fR
into the Cloud SQL instance \f5my\-instance\fR and prompting for the private key
password, run:

.RS 2m
$ gcloud sql import tde my\-instance \-\-certificate=foo \e
    \-\-cert\-path=gs://my\-bucket/my\-cert.cert \e
    \-\-pvk\-path=gs://my\-bucket/my\-key.pvk \-\-prompt\-for\-pvk\-password
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fIINSTANCE\fR

Cloud SQL instance ID.


.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Encryption info to support importing a TDE certificate file

This must be specified.


.RS 2m
.TP 2m
\fB\-\-cert\-path\fR=\fICERT_PATH\fR

Path to the encryption certificate file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-certificate\fR=\fICERTIFICATE\fR

Name of the encryption certificate.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-pvk\-path\fR=\fIPVK_PATH\fR

Path to the encryption private key file in Google Cloud Storage. The URI is in
the form \f5gs://bucketName/fileName\fR.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-prompt\-for\-pvk\-password\fR

Prompt for the private key password associated with the certificate file with
character echo disabled. The password is all typed characters up to but not
including the RETURN or ENTER key.

.TP 2m
\fB\-\-pvk\-password\fR=\fIPVK_PASSWORD\fR

The private key password associated with the certificate file.


.RE
.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha sql import tde
.RE

.RS 2m
$ gcloud beta sql import tde
.RE