gcloud kms single-tenant-hsm create Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud kms single-tenant-hsm create - create a single tenant HSM instance
- SYNOPSIS
gcloud kms single-tenant-hsm create--location=LOCATION--total-approver-count=TOTAL_APPROVER_COUNT[--single-tenant-hsm-instance-id=SINGLE_TENANT_HSM_INSTANCE_ID][GCLOUD_WIDE_FLAG …]
- EXAMPLES
- The following command creates a single tenant HSM instance within the location
us-central1with a total approver count of 3:gcloudkmssingle-tenant-hsmcreate--location=us-central1--total-approver-count=3The following command creates a single tenant HSM instance within the location
us-central1with a total approver count of 3, and the single tenantHSM instance IDmy_stchi:gcloudkmssingle-tenant-hsmcreate--location=us-central1--total-approver-count=3--single-tenant-hsm-instance-id=my_stchi - REQUIRED FLAGS
- Location resource - The KMS location resource. This represents a Cloud resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.
To set the
projectattribute:- provide the argument
--locationon the command line with a fullyspecified name; - set the property
core/project.
This must be specified.
--location=LOCATION- ID of the location or fully qualified identifier for the location.
To set the
locationattribute:- provide the argument
--locationon the command line.
- provide the argument
- provide the argument
--total-approver-count=TOTAL_APPROVER_COUNT- The total number of approvers. This is the N value used for M of N quorum auth.Must be greater than or equal to 3 and less than or equal to 16.
- Location resource - The KMS location resource. This represents a Cloud resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.
- OPTIONAL FLAGS
--single-tenant-hsm-instance-id=SINGLE_TENANT_HSM_INSTANCE_ID- Specify an ID for the single tenant HSM instance. It must be unique within alocation and match the regular expression
[a-zA-Z0-9-]{1,63}.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - NOTES
- These variants are also available:
gcloudalphakmssingle-tenant-hsmcreategcloudbetakmssingle-tenant-hsmcreate
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-12-16 UTC.