---
title: "Google Key Management Service"
url: "/docs/secret_managers/google_kms"
canonical_url: "https://docs.litellm.ai/docs/secret_managers/google_kms"
type: "docs"
last_updated: "2026-10-14"
summary: "Use encrypted keys from Google KMS on the proxy"
related:
  - "/docs/secret_managers/google_secret_manager"
  - "/docs/secret_managers/hashicorp_vault"
---
# Google Key Management Service

> Index of all LiteLLM docs: https://docs.litellm.ai/llms.txt


> **LiteLLM Enterprise feature.** Requires an Enterprise license (`LITELLM_LICENSE`). Talk to sales: https://www.litellm.ai/enterprise#talk-to-sales

Use encrypted keys from Google KMS on the proxy

Step 1. Add keys to env 
```
export GOOGLE_APPLICATION_CREDENTIALS="/path/to/credentials.json"
export GOOGLE_KMS_RESOURCE_NAME="projects/*/locations/*/keyRings/*/cryptoKeys/*"
export PROXY_DATABASE_URL_ENCRYPTED=b'\n$\x00D\xac\xb4/\x8e\xc...'
```

Step 2: Update Config

```yaml
general_settings:
  key_management_system: "google_kms"
  database_url: "os.environ/PROXY_DATABASE_URL_ENCRYPTED"
  master_key: os.environ/LITELLM_MASTER_KEY
```

Step 3: Start + test proxy

```
$ litellm --config /path/to/config.yaml
```

And in another terminal
```
$ litellm --test 
```

[Quick Test Proxy](../proxy/user_keys)

## Related pages

- [Google Secret Manager](https://docs.litellm.ai/docs/secret_managers/google_secret_manager.md)
- [Hashicorp Vault](https://docs.litellm.ai/docs/secret_managers/hashicorp_vault.md)