This version is destroyed, and the key material is no longer stored.
This version may only become [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] again if this version is
[reimport_eligible][google.cloud.kms.v1.CryptoKeyVersion.reimport_eligible] and the original
key material is reimported with a call to
[KeyManagementService.ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
DestroyScheduled
This version is scheduled for destruction, and will be destroyed soon.
Call
[RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
to put it back into the [DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED] state.
Disabled
This version may not be used, but the key material is still available,
and the version can be placed back into the [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] state.
Enabled
This version may be used for cryptographic operations.
ImportFailed
This version was not imported successfully. It may not be used, enabled,
disabled, or destroyed. The submitted key material has been discarded.
Additional details can be found in
[CryptoKeyVersion.import_failure_reason][google.cloud.kms.v1.CryptoKeyVersion.import_failure_reason].
PendingGeneration
This version is still being generated. It may not be used, enabled,
disabled, or destroyed yet. Cloud KMS will automatically mark this
version [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] as soon as the version is ready.
PendingImport
This version is still being imported. It may not be used, enabled,
disabled, or destroyed yet. Cloud KMS will automatically mark this
version [ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED] as soon as the version is ready.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe latest version available is 3.16.0, as indicated by the "(latest)" tag, and there are multiple previous versions accessible, ranging from 3.15.0 down to 2.2.0.\u003c/p\u003e\n"],["\u003cp\u003eThe content describes the \u003ccode\u003eCryptoKeyVersionState\u003c/code\u003e enum, which represents the various operational statuses of a CryptoKeyVersion within the Google Cloud Key Management Service.\u003c/p\u003e\n"],["\u003cp\u003eThere are eight possible states for a \u003ccode\u003eCryptoKeyVersion\u003c/code\u003e: \u003ccode\u003eDestroyed\u003c/code\u003e, \u003ccode\u003eDestroyScheduled\u003c/code\u003e, \u003ccode\u003eDisabled\u003c/code\u003e, \u003ccode\u003eEnabled\u003c/code\u003e, \u003ccode\u003eImportFailed\u003c/code\u003e, \u003ccode\u003ePendingGeneration\u003c/code\u003e, \u003ccode\u003ePendingImport\u003c/code\u003e, and \u003ccode\u003eUnspecified\u003c/code\u003e, each with distinct implications for its usability.\u003c/p\u003e\n"],["\u003cp\u003eCertain states, like \u003ccode\u003eDestroyed\u003c/code\u003e or \u003ccode\u003eImportFailed\u003c/code\u003e, render a version unusable, while \u003ccode\u003eEnabled\u003c/code\u003e permits cryptographic operations, and states like \u003ccode\u003ePendingGeneration\u003c/code\u003e or \u003ccode\u003ePendingImport\u003c/code\u003e reflect ongoing processes.\u003c/p\u003e\n"]]],[],null,[]]
