[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC):2025-08-17。"],[],[],null,["# Manage CMEK policies\n\nThis page provides instructions on how to edit or delete a customer-managed\nencryption key (CMEK) policy.\n\nEdit a CMEK policy\n------------------\n\nYou can change the labels and description of a CMEK policy, but you cannot\nspecify a different key to be used. To specify a different key, you need to\nupdate the CMEK policy, which only works if it isn't already being used by a\nstorage pool.\n\nUse the following instructions to edit a CMEK policy using the Google Cloud console\nor Google Cloud CLI. \n\n### Console\n\nUse the following instructions to edit a CMEK policy in the Google Cloud console.\nYou can only change a CMEK policy description and its labels.\n\n1. Go to the **NetApp Volumes** page in the Google Cloud console.\n\n [Go to NetApp Volumes](https://console.cloud.google.com/netapp/volumes)\n2. Select **CMEK policies**.\n\n3. Find the CMEK policy you want to edit and click **Show more**.\n\n4. Select **Edit**.\n\n5. Optional: Change the description in the **Description** field.\n\n6. Optional: Add, modify, or delete labels.\n\n### gcloud\n\nRun the following command to edit a CMEK policy in Google Cloud CLI: \n\n```json\ngcloud netapp kms-configs update CONFIG_NAME \\\n --project=\u003cvar label=\"project ID\" translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e \\\n --location=\u003cvar label=\"location\" translate=\"no\"\u003eLOCATION\u003c/var\u003e \\\n --description=\u003cvar label=\"description\" translate=\"no\"\u003eDESCRIPTION\u003c/var\u003e \\\n --labels=\u003cvar label=\"labels\" translate=\"no\"\u003eLABELS\u003c/var\u003e \\\n```\n\nFor more options, see [Google Cloud SDK documentation for Cloud Key Management Service](/sdk/gcloud/reference/netapp/kms-configs).\n\nDelete a CMEK policy\n--------------------\n\nYou can delete a CMEK policy if the policy is unused by any storage pools. \n\n### Console\n\nUse the following instructions to delete a CMEK policy using the\nGoogle Cloud console:\n\n1. Go to the **NetApp Volumes** page in the Google Cloud console.\n\n [Go to NetApp Volumes](https://console.cloud.google.com/netapp/volumes)\n2. Select **CMEK policies**.\n\n3. Find the CMEK policy you want to delete and click **Show more**.\n\n4. Select **Delete**.\n\n5. To confirm your selection, enter a name in the **CMEK policy name**\n field.\n\n6. Click **Delete**.\n\n### gcloud\n\nUse the following instructions to delete a CMEK policy using the Google Cloud CLI.\n\nDelete the CMEK policy: \n\n```bash\ngcloud netapp kms-configs delete CONFIG_NAME \\\n --project=PROJECT_ID \\\n --location=LOCATION \\\n```\n\nReplace the following information:\n\n- \u003cvar translate=\"no\"\u003eCONFIG_NAME\u003c/var\u003e: the name of the config\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: the name of the project the CMEK\n policy is in\n\n- \u003cvar translate=\"no\"\u003eLOCATION\u003c/var\u003e: the region of the config you want to\n delete\n\nFor more options, see [Google Cloud SDK documentation for Cloud Key Management Service](/sdk/gcloud/reference/netapp/kms-configs).\n\nWhat's next\n-----------\n\n[Migrate volumes to CMEK](/netapp/volumes/docs/configure-and-use/cmek/migrate-to-CMEK)."]]