forked from docs/doc-exports
qinweiwei
3e4721c813
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com> Co-authored-by: qinweiwei <qinweiwei@huawei.com> Co-committed-by: qinweiwei <qinweiwei@huawei.com>
65 lines
9.4 KiB
HTML
65 lines
9.4 KiB
HTML
<a name="dew_01_0178"></a><a name="dew_01_0178"></a>
|
|
|
|
<h1 class="topictitle1">Creating a Key</h1>
|
|
<div id="body1469675083219"><p id="dew_01_0178__p54509404113454">This section describes how to create a custom key on the KMS console.</p>
|
|
<p id="dew_01_0178__p7393229195910">Custom keys can be categorized into symmetric keys and asymmetric keys.</p>
|
|
<div class="section" id="dew_01_0178__section31361814121614"><h4 class="sectiontitle">Constraints</h4><ul id="dew_01_0178__ul252318129186"><li id="dew_01_0178__li27931370193">You can create up to 100 custom keys, excluding default keys. </li><li id="dew_01_0178__li35251612111811">A custom key is created using the AES-256 algorithm and is 256 bit long.</li><li id="dew_01_0178__li195716571922">Asymmetric keys are created using RSA or ECC algorithms. RSA keys can be used for encryption, decryption, digital signature, and signature verification. ECC keys can be used only for digital signature and signature verification.</li><li id="dew_01_0178__li668420245232">Aliases of default keys end with <span class="parmname" id="dew_01_0178__parmname108281656162110"><b>/default</b></span>. When choosing aliases for your custom keys, do not use aliases ending with <span class="parmname" id="dew_01_0178__parmname1082905617217"><b>/default</b></span>.</li><li id="dew_01_0178__li1152521251811">KMS does not limit the number of times that a key can be called.</li></ul>
|
|
</div>
|
|
<div class="section" id="dew_01_0178__section19111121084"><h4 class="sectiontitle">Scenarios</h4><ul id="dew_01_0178__ul1863113913157"><li id="dew_01_0178__li563110391153">Encrypt data in OBS.</li><li id="dew_01_0178__li2631103991512">Encrypt data in EVS.</li><li id="dew_01_0178__li4631113931517">Encrypt data in IMS.</li><li id="dew_01_0178__li263214394154">Use custom keys to directly encrypt and decrypt small volumes of data.</li><li id="dew_01_0178__li9632839161516">DEK encryption and decryption for user applications</li><li id="dew_01_0178__li2651022617">Message authentication code generation and verification</li></ul>
|
|
</div>
|
|
<div class="section" id="dew_01_0178__section408105191602"><h4 class="sectiontitle">Creating a Key</h4><ol id="dew_01_0178__ol20373371114520"><li id="dew_01_0178__li1296564718544"><span>Log in to the management console.</span></li><li id="dew_01_0178__li880294292648"><span>Click <span><img id="dew_01_0178__image10325154918393" src="en-us_image_0000001284811084.png"></span> in the upper left corner of the management console and select a region or project.</span></li><li id="dew_01_0178__li1279512297175"><span>Click <span><img id="dew_01_0178__image279552911718" src="en-us_image_0000002511593267.png"></span> on the left and choose <span class="menucascade" id="dew_01_0178__menucascade48191408534"><b><span class="uicontrol" id="dew_01_0178__uicontrol1281919409531">Security</span></b> > <b><span class="uicontrol" id="dew_01_0178__uicontrol1581924011533">Key Management Service</span></b></span>.</span></li><li id="dew_01_0178__li1422416584465"><span>Click <span class="uicontrol" id="dew_01_0178__uicontrol1420961119560"><b>Create Key</b></span> in the upper right corner.</span></li><li id="dew_01_0178__li19889912558"><a name="dew_01_0178__li19889912558"></a><a name="li19889912558"></a><span>Configure the parameters as follows:</span><p><div class="fignone" id="dew_01_0178__fig17446574193"><span class="figcap"><b>Figure 1 </b>Creating a key</span><br><span><img id="dew_01_0178__image15141411141912" src="en-us_image_0000002278002189.png"></span></div>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="dew_01_0178__table174911944115811" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Key parameter configuration</caption><thead align="left"><tr id="dew_01_0178__row14491544155813"><th align="left" class="cellrowborder" valign="top" width="32.83%" id="mcps1.3.5.2.5.2.2.2.3.1.1"><p id="dew_01_0178__p16491184412587">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="67.17%" id="mcps1.3.5.2.5.2.2.2.3.1.2"><p id="dew_01_0178__p11491194416584">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="dew_01_0178__row1049111441587"><td class="cellrowborder" valign="top" width="32.83%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="dew_01_0178__p18491104412589">Name</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="67.17%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><p id="dew_01_0178__p134917448583">Name of the key you are creating.</p>
|
|
<div class="note" id="dew_01_0178__note176852814117"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="dew_01_0178__ul65283379114"><li id="dew_01_0178__li155281237618">You can enter digits, letters, underscores (_), hyphens (-), colons (:), and slashes (/).</li><li id="dew_01_0178__li35299371115">You can enter up to 255 characters.</li></ul>
|
|
</div></div>
|
|
</td>
|
|
</tr>
|
|
<tr id="dew_01_0178__row5649331720"><td class="cellrowborder" valign="top" width="32.83%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="dew_01_0178__p126505317214">Key Algorithm</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="67.17%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><p id="dew_01_0178__p156501831825">Select a key algorithm.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="dew_01_0178__row3888134414319"><td class="cellrowborder" valign="top" width="32.83%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="dew_01_0178__p48881244433">Usage</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="67.17%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><p id="dew_01_0178__p14888844732">Key usage. The value cannot be changed after the key is created. The value can be <span class="parmvalue" id="dew_01_0178__parmvalue198465261542"><b>SIGN_VERIFY</b></span>, <span class="parmvalue" id="dew_01_0178__parmvalue2847202616411"><b>ENCRYPT_DECRYPT</b></span>, or <span class="parmvalue" id="dew_01_0178__parmvalue208470262410"><b>GENERATE_VERIFY_MAC</b></span>.</p>
|
|
<ul id="dew_01_0178__ul7832161617911"><li id="dew_01_0178__li88326161096">For an AES_256 symmetric key, the default value is <strong id="dew_01_0178__b1560322545116">ENCRYPT_DECRYPT</strong>.</li><li id="dew_01_0178__li10832181614914">For an HMAC symmetric key, the default value is <span class="parmvalue" id="dew_01_0178__parmvalue224942816293"><b>GENERATE_VERIFY_MAC</b></span>.</li><li id="dew_01_0178__li48326161692">For RSA asymmetric keys, select <strong id="dew_01_0178__b20767121415516">ENCRYPT_DECRYPT</strong> or <strong id="dew_01_0178__b01011618205516">SIGN_VERIFY</strong>. The default value is <strong id="dew_01_0178__b17357120155517">SIGN_VERIFY</strong>.</li><li id="dew_01_0178__li148325166915">For an ECC asymmetric key, the default value is <strong id="dew_01_0178__b194796511445">SIGN_VERIFY</strong>.</li></ul>
|
|
</td>
|
|
</tr>
|
|
<tr id="dew_01_0178__row752513212238"><td class="cellrowborder" valign="top" width="32.83%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="dew_01_0178__p1352615213231">Key Material Source</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="67.17%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><ul id="dew_01_0178__ul3617414232"><li id="dew_01_0178__li3664182312">Key management</li><li id="dew_01_0178__li599917496235">External</li></ul>
|
|
</td>
|
|
</tr>
|
|
<tr id="dew_01_0178__row684414224361"><td class="cellrowborder" valign="top" width="32.83%" headers="mcps1.3.5.2.5.2.2.2.3.1.1 "><p id="dew_01_0178__p1284522203613">Advanced settings</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="67.17%" headers="mcps1.3.5.2.5.2.2.2.3.1.2 "><ul id="dew_01_0178__ul1051224401614"><li id="dew_01_0178__li162681420341">Description<p id="dew_01_0178__p18158181633410"><a name="dew_01_0178__li162681420341"></a><a name="li162681420341"></a>Description of the key.</p>
|
|
</li><li id="dew_01_0178__li579318520350">Tag<p id="dew_01_0178__p557789123512"><a name="dew_01_0178__li579318520350"></a><a name="li579318520350"></a>You can add tags to a secret as you need. </p>
|
|
<div class="note" id="dew_01_0178__note864462233517"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="dew_01_0178__p12645202215352">A maximum of 20 tags can be added for one custom key.</p>
|
|
</div></div>
|
|
</li></ul>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
|
|
</p></li><li id="dew_01_0178__li6331023914251"><span>Click <span class="uicontrol" id="dew_01_0178__uicontrol67211135314"><b>OK</b></span>. </span></li></ol>
|
|
</div>
|
|
<div class="section" id="dew_01_0178__section1638212611642"><h4 class="sectiontitle">Related Operations</h4><ul id="dew_01_0178__ul366744581153"><li id="dew_01_0178__li6688597411713">For details about how to upload objects with server-side encryption, see section "Uploading a File with Server-Side Encryption" in <em id="dew_01_0178__i99120565415">Object Storage Service (OBS) User Guide</em>.</li><li id="dew_01_0178__li141352420532">For details about how to encrypt data on EVS disks, see section "Creating an EVS Disk" in <em id="dew_01_0178__i830518015549">Elastic Volume Service (EVS) User Guide</em>.</li><li id="dew_01_0178__li7779218112256">For details about how to encrypt private images, see section "Encrypting an Image" in <i><cite id="dew_01_0178__cite245718417458">Image Management Service (IMS) User Guide</cite></i>.</li><li id="dew_01_0178__li14492103123114">For details about how to encrypt disks for a database instance in RDS, see section "Purchasing an Instance" in the <em id="dew_01_0178__i3987358113318">Relational Database Service User Guide</em>.</li></ul>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="dew_01_0177.html">Key Management Service</a></div>
|
|
</div>
|
|
</div>
|
|
|