Catat akun layanan Cloud EKM project Anda. Pada contoh berikut, ganti PROJECT_NUMBER dengan nomor projectGoogle Cloud project Anda. Informasi ini juga terlihat setiap kali Anda menggunakan konsol Google Cloud untuk membuat kunci Cloud EKM.
Menyiapkan sistem partner pengelolaan kunci eksternal
Di sistem partner pengelolaan kunci eksternal, berikan akses Google Cloud akun layanan
untuk menggunakan kunci eksternal. Perlakukan akun layanan sebagai alamat email.
Partner mungkin menggunakan terminologi yang berbeda dengan yang digunakan dalam topik ini.
Pastikan gcloud CLI sudah diupdate
Jika Anda akan menggunakan Google Cloud CLI, pastikan CLI tersebut sudah diupdate dengan
perintah berikut:
gcloud
gcloud components update
Pemecahan masalah terkait error
Jika Anda mengalami error saat membuat atau menggunakan kunci Cloud EKM, error akan dicatat. Untuk mengetahui informasi tentang cara memecahkan masalah error Cloud EKM, lihat Referensi error Cloud EKM.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-18 UTC."],[],[],null,["# Set up Cloud EKM via the internet\n\nThis topic is about using Cloud External Key Manager (Cloud EKM) to create and manage external keys\naccessed via the internet.\n\nBefore you begin\n----------------\n\nAfter you complete the steps below, you can begin using Cloud EKM\nkeys to protect your data.\n\n### Create a new project\n\n1. In the Google Cloud console, go to the Manage Resources page.\n\n [Go to the Manage Resources page](https://console.cloud.google.com/project)\n2. Create a new Google Cloud project or select an existing project.\n\n | **Important:** The name you use must be between 4 and 30 characters. When you type the name, the form will suggest a project ID, which you can edit. The project ID you use must be between 6 and 30 characters, with a lowercase letter as the first character. You can use a dash, lowercase letter, or digit for the remaining characters, but the last character cannot be a dash. You should be aware that some resource identifiers (such as project IDs) might be retained beyond the life of your project. For this reason, avoid storing sensitive information in resource identifiers.\n ...see naming guidelines\n3.\n [Verify that billing is enabled for your Google Cloud project](/billing/docs/how-to/verify-billing-enabled#confirm_billing_is_enabled_on_a_project).\n\n4. You can learn more about [Cloud EKM pricing](/kms/pricing).\n\n### Enable Cloud KMS\n\n1. Enable the Cloud Key Management Service API for the project.\n\n [Enable the Cloud Key Management Service API](https://console.cloud.google.com/flows/enableapi?apiid=cloudkms.googleapis.com)\n2. Make a note of your project's Cloud EKM service account. In the\n following example, replace \u003cvar translate=\"no\"\u003ePROJECT_NUMBER\u003c/var\u003e with your\n Google Cloud project's [project number](/resource-manager/docs/creating-managing-projects#identifying_projects). This\n information is also visible each time you use the Google Cloud console to create\n a Cloud EKM key.\n\n ```\n service-PROJECT_NUMBER@gcp-sa-ekms.iam.gserviceaccount.com\n ```\n\n### Prepare the external key management partner system\n\nIn the external key management partner system, grant the Google Cloud service account\naccess to use the external key. Treat the service account as an email address.\nPartners may use different terminology than that used in this topic.\n\n### Ensure gcloud CLI is up to date\n\nIf you're going to use the Google Cloud CLI, ensure that it's up-to-date with\nthe following command: \n\n### gcloud\n\n```\ngcloud components update\n```\n\nTroubleshooting errors\n----------------------\n\nIf you experience an error when creating or using a Cloud EKM key, an\nerror is logged. For information about troubleshooting Cloud EKM\nerrors, see the [Cloud EKM error reference](/kms/docs/reference/ekm_errors).\n\nWhat's next\n-----------\n\n- [Create an external key](/kms/docs/create-external-key)"]]
