// [END kms_destroy_cryptokey_version]
// [START kms_restore_cryptokey_version]
public static void RestoreCryptoKeyVersion(string projectId, string locationId, string keyRingId, string cryptoKeyId, string versionId)
{
KeyManagementServiceClient client = KeyManagementServiceClient.Create();
// The CryptoKeyVersion to restore.
CryptoKeyVersionName versionName =
new CryptoKeyVersionName(projectId, locationId, keyRingId, cryptoKeyId, versionId);
CryptoKeyVersion result = client.RestoreCryptoKeyVersion(versionName);
Console.Write($"Restored Crypto Key Version: {result.Name}");
}
public CryptoKeyVersion RestoreKeyVersion(string projectId = "my-project", string locationId = "us-east1", string keyRingId = "my-key-ring", string keyId = "my-key", string keyVersionId = "123")
{
// Create the client.
KeyManagementServiceClient client = KeyManagementServiceClient.Create();
// Build the key version name.
CryptoKeyVersionName cryptoKeyVersionName = new CryptoKeyVersionName(projectId, locationId, keyRingId, keyId, keyVersionId);
// Call the API.
CryptoKeyVersion result = client.RestoreCryptoKeyVersion(cryptoKeyVersionName);
// Return the result.
return(result);
}
// [END kms_enable_cryptokey_version]
// [START kms_get_cryptokey_version]
public static void GetCryptoKeyVersion(string projectId, string locationId, string keyRingId, string cryptoKeyId, string versionId)
{
KeyManagementServiceClient client = KeyManagementServiceClient.Create();
// The CryptoKeyVersion to enable.
CryptoKeyVersionName versionName =
new CryptoKeyVersionName(projectId, locationId, keyRingId, cryptoKeyId, versionId);
CryptoKeyVersion result = client.GetCryptoKeyVersion(versionName);
Console.WriteLine($"Name: {result.Name}");
Console.WriteLine($"Created: {result.CreateTime}");
Console.WriteLine($"State: {result.State}");
}
public CryptoKeyVersion CreateKeyVersion(string projectId = "my-project", string locationId = "us-east1", string keyRingId = "my-key-ring", string keyId = "my-key")
{
// Create the client.
KeyManagementServiceClient client = KeyManagementServiceClient.Create();
// Build the parent key name.
CryptoKeyName keyName = new CryptoKeyName(projectId, locationId, keyRingId, keyId);
// Build the key version.
CryptoKeyVersion keyVersion = new CryptoKeyVersion {
};
// Call the API.
CryptoKeyVersion result = client.CreateCryptoKeyVersion(keyName, keyVersion);
// Return the result.
return(result);
}
// [END kms_disable_cryptokey_version]
// [START kms_enable_cryptokey_version]
public static void EnableCryptoKeyVersion(string projectId, string locationId, string keyRingId, string cryptoKeyId, string versionId)
{
KeyManagementServiceClient client = KeyManagementServiceClient.Create();
// The CryptoKeyVersion to enable.
CryptoKeyVersionName versionName =
new CryptoKeyVersionName(projectId, locationId, keyRingId, cryptoKeyId, versionId);
CryptoKeyVersion version = client.GetCryptoKeyVersion(versionName);
version.State = CryptoKeyVersion.Types.CryptoKeyVersionState.Enabled;
FieldMask fieldMask = new FieldMask();
fieldMask.Paths.Add("state");
CryptoKeyVersion patchResult = client.UpdateCryptoKeyVersion(version, fieldMask);
Console.Write($"Enabled Crypto Key Version: {patchResult.Name}");
}
public byte[] GetKeyVersionAttestation(
string projectId = "my-project", string locationId = "us-east1", string keyRingId = "my-key-ring", string keyId = "my-key", string keyVersionId = "123")
{
// Create the client.
KeyManagementServiceClient client = KeyManagementServiceClient.Create();
// Build the key name.
CryptoKeyVersionName keyVersionName = new CryptoKeyVersionName(projectId, locationId, keyRingId, keyId, keyVersionId);
// Call the API.
CryptoKeyVersion result = client.GetCryptoKeyVersion(keyVersionName);
// Only HSM keys have an attestation. For other key types, the attestion
// will be nil.
KeyOperationAttestation attestation = result.Attestation;
if (attestation == null)
{
throw new InvalidOperationException("no attestation");
}
// Return the attestation.
return(attestation.Content.ToByteArray());
}
public CryptoKeyVersion DisableKeyVersion(string projectId = "my-project", string locationId = "us-east1", string keyRingId = "my-key-ring", string keyId = "my-key", string keyVersionId = "123")
{
// Create the client.
KeyManagementServiceClient client = KeyManagementServiceClient.Create();
// Build the key version.
CryptoKeyVersion keyVersion = new CryptoKeyVersion
{
CryptoKeyVersionName = new CryptoKeyVersionName(projectId, locationId, keyRingId, keyId, keyVersionId),
State = CryptoKeyVersion.Types.CryptoKeyVersionState.Disabled,
};
// Build the update mask.
FieldMask fieldMask = new FieldMask
{
Paths = { "state" },
};
// Call the API.
CryptoKeyVersion result = client.UpdateCryptoKeyVersion(keyVersion, fieldMask);
// Return the result.
return(result);
}
