Create an external key in Google Cloud EKM

to create an external key in the google cloud key management dashboard, perform the following steps from the main google cloud dashboard, enter key management in the search bar, and select the key management security service select the key ring you created in earlier select \[ create key ] this opens the key creation wizard enter a name for the key this key name does not need to match the name of the key created in {{ch}} select external as the protection level for the key select either via internet or via vpc as the ekm connection type select \[ continue ] enter the key uri you can copy the key uri by selecting the key uri button for the key in cryptohub important in addition to the preceding steps, google must whitelist the domain specified in the key uri field for your specific google cloud account select \[ continue ] again this enables you to select symmetric encrypt/decrypt or asymmetric sign in the purpose drop down menu select \[ create ] to create the externally managed key the key status should change to a green checkmark, confirming the key is successfully synced with the key material stored in {{ch}}