The key's creation date.

This property reflects the key's creation date, formatted as an RFC 3339 UTC timestamp.

The name of the key.

This property reflects the name of the key.

The key's next rotation date.

This property reflects the key's next rotation date, formatted as an RFC 3339 UTC timestamp, or empty string if automatic rotation is not enabled.

Note that automatic rotation is only supported for symmetric keys.

The Id of the key's primary version.

For symmetric keys, this property reflects the Id of the key's primary version. For asymmetric keys, this property is always empty, since asymmetric keys cannot have a primary version.

The key's purpose.

This property reflects the key's purpose. Possible values are:

• gkpUnspecified (0)
• gkpEncryptDecrypt (1) (indicates the key is symmetric)
• gkpAsymmetricSign (2)
• gkpAsymmetricDecrypt (3)

The key's rotation period.

This property reflects the key's rotation period, formatted as a number of seconds with up to nine fractional digits with a trailing s (e.g., 3.5984s); or empty string if automatic rotation is not enabled.

Note that automatic rotation is only supported for symmetric keys.

The algorithm to use when new versions of the key are created.

This property reflects the algorithm to use when new versions of the key are created by CreateVersion.

The protection level to use when new versions of the key are created.

This property reflects the protection level to use when new versions of the key are created by CreateVersion. Possible values are:

• SOFTWARE
• HSM
• EXTERNAL