Key Management

Scenarios

During routine cloud O&M, to enhance data security, COC uses DEW to encrypt your host accounts and passwords to protect them from being leaked. However, in actual operations, if no keys are created in DEW in advance, passwords cannot be encrypted for storage. As a result, O&M security and efficiency are affected. In this case, the storage and management of host accounts and passwords cannot be guaranteed. COC uses DEW to encrypt your host account passwords for secure protection. Before using the key management function, create a key on DEW. For details, see Creating a Custom Key.

Configuring a Key

1. Log in to COC.
2. In the navigation pane on the left, choose Resource O&M > Automated O&M.
3. In the Routine O&M area, and click Account Management.
4. Click Keys in the upper right corner.
5. Check whether a key has been bound.
   • If this is the first time you use KMS and no key has been bound, click Bind Key.
   • If a key has been bound, click Update.

6. Select the key to be bound and click OK.
   

   • If no key is available, click Create Key to go to the DEW service to create a key. After the key is created, return to the Bind Key or Update key page and click on the right to update the key list.

   • COC connects only to DEW deployed in the AP-Singapore region. The key of this region is used to encrypt and decrypt data on hosts in all regions.

7. Click OK.

   The key is bound.