forked from docs/doc-exports
qinweiwei
3e4721c813
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com> Co-authored-by: qinweiwei <qinweiwei@huawei.com> Co-committed-by: qinweiwei <qinweiwei@huawei.com>
17 lines
2.9 KiB
HTML
17 lines
2.9 KiB
HTML
<a name="dew_01_0008"></a><a name="dew_01_0008"></a>
|
|
|
|
<h1 class="topictitle1">Encrypting Data in EVS</h1>
|
|
<div id="body8662426"><ul id="dew_01_0008__en-us_topic_0000002247169038_ul292114191134"><li id="dew_01_0008__en-us_topic_0000002247169038_li014885111115">When purchasing a disk, you can choose <strong id="dew_01_0008__en-us_topic_0000002247169038_b34906822211">Advanced Settings</strong> > <strong id="dew_01_0008__en-us_topic_0000002247169038_b1949110842211">Encryption</strong> to encrypt the disk using the key provided by KMS. For details, see <a href="#dew_01_0008__en-us_topic_0000002247169038_fig1372118163416">Figure 1</a>. For more information about EVS, see <i><cite id="dew_01_0008__en-us_topic_0000002247169038_cite8146115161119">Elastic Volume Service User Guide</cite></i>.<div class="note" id="dew_01_0008__en-us_topic_0000002247169038_note11471051201111"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dew_01_0008__en-us_topic_0000002247169038_p1514735111113">Before you use the encryption function, EVS must be granted the permission to access KMS. If you have the right to grant the permission, you can grant the permission directly. If you do not have the permission, contact a user with the security administrator permissions to add the security administrator permission for you. Then, you can grant the permission. For more information about EVS, see <i><cite id="dew_01_0008__en-us_topic_0000002247169038_cite59931115216">Elastic Volume Service User Guide</cite></i>.</p>
|
|
</div></div>
|
|
<div class="fignone" id="dew_01_0008__en-us_topic_0000002247169038_fig1372118163416"><a name="dew_01_0008__en-us_topic_0000002247169038_fig1372118163416"></a><a name="en-us_topic_0000002247169038_fig1372118163416"></a><span class="figcap"><b>Figure 1 </b>Encrypting data in EVS</span><br><span><img id="dew_01_0008__en-us_topic_0000002247169038_image19824105814162" src="en-us_image_0000002283527325.png"></span></div>
|
|
<p id="dew_01_0008__en-us_topic_0000002247169038_p12147125171117">There are two types of CMKs that can be used:</p>
|
|
<ul id="dew_01_0008__en-us_topic_0000002247169038_ul51471451181110"><li id="dew_01_0008__en-us_topic_0000002247169038_li314745151117">The default key <strong id="dew_01_0008__en-us_topic_0000002247169038_b842352706151922_3">evs/default</strong> created by KMS</li><li id="dew_01_0008__en-us_topic_0000002247169038_li191471851171115">Custom keys that you create on the KMS console using KMS-generated key materials</li></ul>
|
|
</li><li id="dew_01_0008__en-us_topic_0000002247169038_li8934161920130">You can also call EVS APIs to create encrypted EVS disks. For details, see <i><cite id="dew_01_0008__cite1131824772514">Elastic Volume Service API Reference</cite></i>.</li></ul>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="en-us_topic_0000002248485012.html">Cloud Services with KMS Integrated</a></div>
|
|
</div>
|
|
</div>
|
|
|