This version is destroyed, and the key material is no longer stored.
This version may only become
[ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
again if this version is
[reimport_eligible][google.cloud.kms.v1.CryptoKeyVersion.reimport_eligible]
and the original key material is reimported with a call to
[KeyManagementService.ImportCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.ImportCryptoKeyVersion].
DestroyScheduled
This version is scheduled for destruction, and will be destroyed soon.
Call
[RestoreCryptoKeyVersion][google.cloud.kms.v1.KeyManagementService.RestoreCryptoKeyVersion]
to put it back into the
[DISABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.DISABLED]
state.
Disabled
This version may not be used, but the key material is still available,
and the version can be placed back into the
[ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
state.
Enabled
This version may be used for cryptographic operations.
ImportFailed
This version was not imported successfully. It may not be used, enabled,
disabled, or destroyed. The submitted key material has been discarded.
Additional details can be found in
[CryptoKeyVersion.import_failure_reason][google.cloud.kms.v1.CryptoKeyVersion.import_failure_reason].
PendingGeneration
This version is still being generated. It may not be used, enabled,
disabled, or destroyed yet. Cloud KMS will automatically mark this
version
[ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
as soon as the version is ready.
PendingImport
This version is still being imported. It may not be used, enabled,
disabled, or destroyed yet. Cloud KMS will automatically mark this
version
[ENABLED][google.cloud.kms.v1.CryptoKeyVersion.CryptoKeyVersionState.ENABLED]
as soon as the version is ready.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe content outlines different versions of \u003ccode\u003eCryptoKeyVersionState\u003c/code\u003e within the \u003ccode\u003eGoogle.Cloud.Kms.V1\u003c/code\u003e namespace, ranging from version 2.2.0 to the latest 3.16.0.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eCryptoKeyVersionState\u003c/code\u003e is an enum that defines the operational status of a \u003ccode\u003eCryptoKeyVersion\u003c/code\u003e, indicating whether it can be used or not.\u003c/p\u003e\n"],["\u003cp\u003eThere are eight possible states for a \u003ccode\u003eCryptoKeyVersion\u003c/code\u003e: Unspecified, PendingGeneration, PendingImport, Enabled, Disabled, DestroyScheduled, Destroyed, and ImportFailed, each with specific implications for the version's usability and management.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eDestroyed\u003c/code\u003e state indicates that a version's key material is no longer stored, but it can be re-enabled if reimported, while the \u003ccode\u003eDestroyScheduled\u003c/code\u003e state means the version is set for destruction but can be restored.\u003c/p\u003e\n"],["\u003cp\u003eVersions in \u003ccode\u003ePendingGeneration\u003c/code\u003e or \u003ccode\u003ePendingImport\u003c/code\u003e states are not yet ready for use, and those in \u003ccode\u003eImportFailed\u003c/code\u003e cannot be used at all, due to an unsuccessful import.\u003c/p\u003e\n"]]],[],null,[]]
