gcloud beta sql export tde

NAME
gcloud beta sql export tde - export a TDE certificate from a Cloud SQL for SQL Server instance
SYNOPSIS
gcloud beta sql export tdeINSTANCE(--cert-path=CERT_PATH--certificate=CERTIFICATE--pvk-path=PVK_PATH (--prompt-for-pvk-password |--pvk-password=PVK_PASSWORD))[--async][GCLOUD_WIDE_FLAG]
DESCRIPTION
(BETA) Exports a TDE certificate from a Cloud SQL instance to aGoogle Cloud Storage bucket. This is only supported for SQL Server.
EXAMPLES
To export a TDE certificate with the namefoo and private keypasswordmy-pvk-password in the Cloud SQL instancemy-instance to certificate pathmy-bucket/my-cert.certand private key pathmy-bucket/my-key.pvk, run:
gcloudbetasqlexporttdemy-instance--certificate=foo--cert-path=gs://my-bucket/my-cert.cert--pvk-path=gs://my-bucket/my-key.pvk--pvk-password=my-pvk-password

To export a TDE certificate with the namefoo and private keypasswordmy-pvk-password in the Cloud SQL instancemy-instance and prompting for the private key password, run:

gcloudbetasqlexporttdemy-instance--certificate=foo--cert-path=gs://my-bucket/my-cert.cert--pvk-path=gs://my-bucket/my-key.pvk--prompt-for-pvk-password
POSITIONAL ARGUMENTS
INSTANCE
Cloud SQL instance ID.
REQUIRED FLAGS
Encryption info to support importing a TDE certificate file

This must be specified.

--cert-path=CERT_PATH
Path to the encryption certificate file in Google Cloud Storage. The URI is inthe formgs://bucketName/fileName.

This flag argument must be specified if any of the other arguments in this groupare specified.

--certificate=CERTIFICATE
Name of the encryption certificate.

This flag argument must be specified if any of the other arguments in this groupare specified.

--pvk-path=PVK_PATH
Path to the encryption private key file in Google Cloud Storage. The URI is inthe formgs://bucketName/fileName.

This flag argument must be specified if any of the other arguments in this groupare specified.

Exactly one of these must be specified:
--prompt-for-pvk-password
Prompt for the private key password associated with the certificate file withcharacter echo disabled. The password is all typed characters up to but notincluding the RETURN or ENTER key.
--pvk-password=PVK_PASSWORD
The private key password associated with the certificate file.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to complete.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This command is currently in beta and might change without notice. Thesevariants are also available:
gcloudsqlexporttde
gcloudalphasqlexporttde

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.