Customer-Supplied Encryption Keys (CSEK) for Google Cloud Storage in action

[@manishzope4423]

Thanks Mahesh for short and easy to understand videos

[@LearnGoogleCloudwithMahesh]

Thanks Manish

[@PavanKumar-ur2jy]

Use cryptographic keys Under Security to generate CSEK, use it where ever required. Also you have option to choose HSM for FinServ Orgs.

[@rashmitrathod6873]

You've KMS under Security that allows creating CMEK but not CSEK. Google Cloud doesn't have any built-in service to generate CSEK. You have to use hardware based (HSM) or Software based(Hashicorp Vault, AWS KMS, Azure Vault, OpenSSL library etc.) to generate your Cryptographic Key.

[@SrinivasRao-sb8gu]

Good one Mahesh !

[@HenryPan]

Cool action:>)

[@LearnGoogleCloudwithMahesh]

Thanks Henry Pan...

[@ramlakhan1505]

Hi Mahesh, could you please guide how can we change disk encryption type to CMEK via command line ?

[@Rahulsharma-180]

Hi Sir,
I have supplied the encrypted key but still can see the encryption as google-managed key.
Where i am doing wrong ? I have followed the same above process

[@LearnGoogleCloudwithMahesh]

Hi Rahul, please paste the commands which you have used it helps to figure that is the issue...

[@Rahulsharma-180]

It’s working now after changing the commands, that GSUtil cmd is case sensitive. Thank you

[@vishalramani2978]

Do we have any examples with java ?

[@LearnGoogleCloudwithMahesh]

cloud.google.com/storage/docs/encryption/using-customer-supplied-keys#storage-generate-encryption-key-java

[@rajkishormahanada6223]

Sir, I am interested in big query . could you please upload the video of real time.

[@LearnGoogleCloudwithMahesh]

Sure Rajkishor, I will add BigQuery to my to do video list...