- NAME
-
- gcloud kms import-jobs create - create a new import job
- SYNOPSIS
-
-
gcloud kms import-jobs createIMPORT_JOB--import-method=IMPORT_METHOD--protection-level=PROTECTION_LEVEL[--keyring=KEYRING] [--location=LOCATION] [--single-tenant-hsm-instance=SINGLE_TENANT_HSM_INSTANCE] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- Creates a new import job within the given keyring.
- EXAMPLES
- The following command creates a new import job named
striderwithin thefellowshipkeyring, andus-central1location:gcloud kms import-jobs create strider --location = us-central1 --keyring = fellowship --import-method = rsa-oaep-3072-sha256-aes-256 --protection-level = hsmThe following command creates a new import job named
striderwithin thefellowshipkeyring, andus-central1location:gcloud kms import-jobs create strider --location = us-central1 --keyring = fellowship --import-method = rsa-oaep-3072-sha256-aes-256 --protection-level = hsm-single-tenant --single-tenant-hsm-instance = my_sthi - POSITIONAL ARGUMENTS
-
-
IMPORT_JOB - Name of the import job to create.
-
- REQUIRED FLAGS
-
-
--import-method=IMPORT_METHOD - The wrapping method to be used for incoming key material. For more information
about choosing an import method, see https://cloud.google.com/kms/docs/key-wrapping
.
IMPORT_METHODmust be one of:rsa-oaep-3072-sha1-aes-256,rsa-oaep-3072-sha256,rsa-oaep-3072-sha256-aes-256,rsa-oaep-4096-sha1-aes-256,rsa-oaep-4096-sha256,rsa-oaep-4096-sha256-aes-256. -
--protection-level=PROTECTION_LEVEL - Protection level of the import job.
PROTECTION_LEVELmust be one of:software,hsm,hsm-single-tenant.
-
- OPTIONAL FLAGS
-
-
--keyring=KEYRING - Key ring of the import job.
-
--location=LOCATION - Location of the import job.
-
--single-tenant-hsm-instance=SINGLE_TENANT_HSM_INSTANCE - The single tenant HSM instance to use for the import job.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- These variants are also available:
gcloud alpha kms import-jobs creategcloud beta kms import-jobs create
gcloud kms import-jobs create
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

