Sample Header Ad - 728x90

Google Cloud does not like my Customer-supplied encryption key (CSEK)

0 votes
0 answers
79 views
I'm trying to encrypt a VM image with my own provided key. enter image description here So I go to my Terminal emulator and do:
$ openssl enc -aes256 -A -P                    
enter aes-256-cbc encryption password:
Verifying - enter aes-256-cbc encryption password:
salt=DCD571B7A0EC122B
key=786D832EBF415B5F6BCF852AC8DC38826D904DEAFC53885F3B9F49003788B073
iv =B641A744631C462ED2896563F2AB9A1C
I punch in the key into Google cloud and it throws back an error: enter image description here So I read the documentation from Google about CSEK and it reads: enter image description here So I run that script, I get the results in base64, but then it doesn't accept it (however, it does accept the one from the Google example). Do I have to pass this resulting base64 string to openssl enc? I'm a bit lost, and Google doesn't provide any results that apply to my case. Any help and/or guidance would be greatly appreciated!
Asked by mariano-daniel (227 rep)
Jun 11, 2023, 01:18 AM
Last activity: Jun 11, 2023, 12:31 PM