Class UpdateKeyConfig.Request

    • Method Detail

      • name

        public UpdateKeyConfig.Request name​(String name)
        Specifies the name of the encryption key to create.
        Parameters:
        name - key name
        Returns:
        updated request
      • minDecryptionVersion

        public UpdateKeyConfig.Request minDecryptionVersion​(int version)
        Specifies the minimum version of ciphertext allowed to be decrypted. Adjusting this as part of a key rotation policy can prevent old copies of ciphertext from being decrypted, should they fall into the wrong hands. For signatures, this value controls the minimum version of signature that can be verified against. For HMACs, this controls the minimum version of a key allowed to be used as the key for verification.
        Parameters:
        version - version
        Returns:
        updated request
      • minEncryptionVersion

        public UpdateKeyConfig.Request minEncryptionVersion​(int version)
        Specifies the minimum version of the key that can be used to encrypt plaintext, sign payloads, or generate HMACs. Must be 0 (which will use the latest version) or a value greater or equal to minDecryptionVersion(int).
        Parameters:
        version - version
        Returns:
        updated request
      • allowDeletion

        public UpdateKeyConfig.Request allowDeletion​(boolean allowed)
        Specifies if the key is allowed to be deleted.
        Parameters:
        allowed - whether is is allowed to delete the key
        Returns:
        updated request
      • exportable

        public UpdateKeyConfig.Request exportable​(boolean exportable)
        Enables keys to be exportable. This allows for all the valid keys in the key ring to be exported. Once set, this cannot be disabled.
        Parameters:
        exportable - whether the key should be exportable
        Returns:
        updated request
      • allowPlaintextBackup

        public UpdateKeyConfig.Request allowPlaintextBackup​(boolean allowBackup)
        If set, enables taking backup of named key in the plaintext format. Once set, this cannot be disabled.
        Parameters:
        allowBackup - whether to allow plaintext backup
        Returns:
        updated request