Google Cloud EKM (External Key...
Configure the Google KMS Dashboard initially
4 min
this section walks through the initial configuration steps required within the google cloud platform console to prepare for the google cloud ekm integration with {{vc}} create a key ring to organize your keys configure the appropriate location settings for optimal performance obtain the service account email that is essential for the {{vc}} configuration in the following section these foundational steps establish the google cloud side of the integration before moving to the {{vc}} intelligence portal (vip) configuration go to the cloud kms dashboard perform the following step to open the dashboard from the main gcp dashboard, enter key management service into the search bar at the top of the page then, select cryptographic keys create a new key ring perform the following steps to create a new key ring from the cryptographic keys dashboard, select \[ create key ring ] at the top of the page in the create key ring wizard, perform the following steps enter a key ring name key ring names can contain letters, numbers, underscores ( ), and hyphens ( ) you can't remove or delete key rings specify the key ring location and select \[create] note the following points about the key ring location cloud ekm needs to be able to reach your keys quickly to avoid an error when creating a cloud ekm key, choose a google cloud location that is geographically near the {{vc}} region where the key resides you can use cloud ekm in any google cloud location supported for cloud kms, except for global identify the service account email perform the following steps to note the service account email for the externally managed key after you create the key ring, the browser redirects to the key creation wizard select the externally managed key option and scroll down to the bottom of the page note the service account email address, because the next section, covering various configurations that you must make in the vip, uses it