gcloud alpha sql import tde

NAME
gcloud alpha sql import tde - import TDE certificate into a Cloud SQL for SQL Server instance
SYNOPSIS
gcloud alpha sql import tdeINSTANCE(--cert-path=CERT_PATH--certificate=CERTIFICATE--pvk-path=PVK_PATH (--prompt-for-pvk-password |--pvk-password=PVK_PASSWORD))[--async][GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) gcloud alpha sql import tde imports a TDE certificate intoa Cloud SQL instance from a certificate file in Google Cloud Storage.

For detailed help on importing data into Cloud SQL, refer to this guide:https://cloud.google.com/sql/docs/sqlserver/import-export/importing

EXAMPLES
To import a TDE certificate with the namefoo and certificate pathmy-bucket/my-cert.cert and private key pathmy-bucket/my-key.pvk and pvk passwordmy-pvk-passwordinto the Cloud SQL instancemy-instance, run:
gcloudalphasqlimporttdemy-instance--certificate=foo--cert-path=gs://my-bucket/my-cert.cert--pvk-path=gs://my-bucket/my-key.pvk--pvk-password=my-pvk-password

To import a TDE certificate with the namefoo and certificate pathmy-bucket/my-cert.cert and private key pathmy-bucket/my-key.pvk into the Cloud SQL instancemy-instance and prompting for the private key password, run:

gcloudalphasqlimporttdemy-instance--certificate=foo--cert-path=gs://my-bucket/my-cert.cert--pvk-path=gs://my-bucket/my-key.pvk--prompt-for-pvk-password
POSITIONAL ARGUMENTS
INSTANCE
Cloud SQL instance ID.
REQUIRED FLAGS
Encryption info to support importing a TDE certificate file

This must be specified.

--cert-path=CERT_PATH
Path to the encryption certificate file in Google Cloud Storage. The URI is inthe formgs://bucketName/fileName.

This flag argument must be specified if any of the other arguments in this groupare specified.

--certificate=CERTIFICATE
Name of the encryption certificate.

This flag argument must be specified if any of the other arguments in this groupare specified.

--pvk-path=PVK_PATH
Path to the encryption private key file in Google Cloud Storage. The URI is inthe formgs://bucketName/fileName.

This flag argument must be specified if any of the other arguments in this groupare specified.

Exactly one of these must be specified:
--prompt-for-pvk-password
Prompt for the private key password associated with the certificate file withcharacter echo disabled. The password is all typed characters up to but notincluding the RETURN or ENTER key.
--pvk-password=PVK_PASSWORD
The private key password associated with the certificate file.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to complete.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudsqlimporttde
gcloudbetasqlimporttde

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.