gcloud beta sql export tde Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud beta sql export tde - export a TDE certificate from a Cloud SQL for SQL Server instance
- SYNOPSIS
gcloud beta sql export tdeINSTANCE(--cert-path=CERT_PATH--certificate=CERTIFICATE--pvk-path=PVK_PATH(--prompt-for-pvk-password|--pvk-password=PVK_PASSWORD))[--async][GCLOUD_WIDE_FLAG …]
- DESCRIPTION
(BETA)Exports a TDE certificate from a Cloud SQL instance to aGoogle Cloud Storage bucket. This is only supported for SQL Server.- EXAMPLES
- To export a TDE certificate with the name
fooand private keypasswordmy-pvk-passwordin the Cloud SQL instancemy-instanceto certificate pathmy-bucket/my-cert.certand private key pathmy-bucket/my-key.pvk, run:gcloudbetasqlexporttdemy-instance--certificate=foo--cert-path=gs://my-bucket/my-cert.cert--pvk-path=gs://my-bucket/my-key.pvk--pvk-password=my-pvk-passwordTo export a TDE certificate with the name
fooand private keypasswordmy-pvk-passwordin the Cloud SQL instancemy-instanceand prompting for the private key password, run:gcloudbetasqlexporttdemy-instance--certificate=foo--cert-path=gs://my-bucket/my-cert.cert--pvk-path=gs://my-bucket/my-key.pvk--prompt-for-pvk-password - POSITIONAL ARGUMENTS
INSTANCE- Cloud SQL instance ID.
- REQUIRED FLAGS
- Encryption info to support importing a TDE certificate file
This must be specified.
--cert-path=CERT_PATH- Path to the encryption certificate file in Google Cloud Storage. The URI is inthe form
gs://bucketName/fileName.This flag argument must be specified if any of the other arguments in this groupare specified.
--certificate=CERTIFICATE- Name of the encryption certificate.
This flag argument must be specified if any of the other arguments in this groupare specified.
--pvk-path=PVK_PATH- Path to the encryption private key file in Google Cloud Storage. The URI is inthe form
gs://bucketName/fileName.This flag argument must be specified if any of the other arguments in this groupare specified.
- Exactly one of these must be specified:
--prompt-for-pvk-password- Prompt for the private key password associated with the certificate file withcharacter echo disabled. The password is all typed characters up to but notincluding the RETURN or ENTER key.
--pvk-password=PVK_PASSWORD- The private key password associated with the certificate file.
- Encryption info to support importing a TDE certificate file
- OPTIONAL FLAGS
--async- Return immediately, without waiting for the operation in progress to complete.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - NOTES
- This command is currently in beta and might change without notice. Thesevariants are also available:
gcloudsqlexporttdegcloudalphasqlexporttde
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-05-07 UTC.