Step 6. Enable Encryption

In this article

    [This step applies only if you have selected the Restore to new location, or with different settings option at the Restore Mode step of the wizard]

    At the Encryption step of the wizard, choose whether persistent disks of the restored VM instance will be encrypted with Google Cloud Key Management Service (Cloud KMS) customer-managed encryption keys (CMEKs):

    • If you do not want to encrypt persistent disks or want to apply the existing encryption scheme, select the Use original encryption scheme option.
    • If you want to encrypt persistent disks, select the Use customer-managed encryption key from Google Cloud KMS option and choose the necessary CMEK from the Encryption key drop-down list.

    For a CMEK to be displayed in the list of available encryption keys, it must be stored in the region selected at step 5.


    Restoring VM Instance