google-cloud-platformgoogle-cloud-kms

Migrate GCP Cloud Kms key from single region to multi regional


i have a key created in a GCP project using Cloud Kms, i use it to encrypt some data but at the time it was created it was done on a single region and now i would want to make it multi regional.

Is this possible to do without having to create a brand new key and re-encrypt everything again?

I tried searching for a way to export the key in order to upload it again as multi regional but was unable to find a way to do it.


Solution

  • I don't see an alternative to creating a new key and re-encrypting if you want to change the regional availability of your key. There's no key export nor is there such a migration feature.