GUI: Create Cryptographic Key on GCP KMS

First, a symmetric cryptographic key with no key material associated is created.

1. Go to the Key Management under Security page in the Cloud Console.

Google Cloud Key Management

2. Click Create key ring.

3. In the Key ring name field, enter the name for your key ring.

Create keyring window

4. From the Location dropdown menu, select the location.

5. Click Create. The detail page for the key ring will open.

6. Click Create key.

Setting Key name and Protection Level

7. In the Key name field, enter the name for your key.

8. Set the protection level to Software.

9. Click CONTINUE.

10. Select Imported key in the Key material. This prevents an initial key version from being created.

Setting Key material type

11. Click CONTINUE.

12. Set Purpose and algorithm to Symmetric encrypt/decrypt as the key we are going to import is AES Key and its purpose will be to do symmetric encrypt/decrypt.

Setting up Purpose and algorithm

13. Click CONTINUE.

14. On Version click Continue with default value.

15. Optionally, in the Labels field, click Add label, if you want to add a label to your key.

Adding Labels

16. Click Create.