Help Center> Data Encryption Workshop> User Guide> Key Pair Service> Importing a Key Pair
View PDF

Importing a Key Pair

If you need to use your own key pair (for example, using the key pair created by the PuTTYgen tool), you can import the public key to the management console and use its private key to remotely log in to an ECS. You can also manage the private key on the management console of Huawei Cloud as necessary.

If multiple IAM users need to use the same key pair, use another tool (such as PuTTYgen) to create a key pair and import it for each of the IAM users separately.

Prerequisites

  • The public and private key files of the key pair to be imported are ready.
  • The imported key pair is an account key pair. If a private key pair with the same name has been created, the system displays a message indicating that the key pair name already exists when you import the account key pair.
  • Each IAM user does not have a private key pair with the same name.

Constraints

  • The SSH keys imported to the KPS console support the following cryptographic algorithms:
    • SSH-DSS
    • SSH-ED25519
    • ECDSA-SHA2-NISTP256
    • ECDSA-SHA2-NISTP384
    • ECDSA-SHA2-NISTP521
    • SSH_RSA: The length can be 2048, 3072, 4096 bits.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security & Compliance > Data Encryption Workshop.
  4. In the navigation pane on the left, click Key Pair Service.
  5. Click Import Key Pair.
  6. In the Import Key Pair dialog box, click Select File and import a public key file, or copy and paste public keys in the Public Key Content text box.

    Figure 1 Importing a key pair
    • You can customize the name of an imported key pair.
    • If the system displays a message indicating that the name already exists, you need to change the key pair name because the name has been created by another IAM user.

  7. If you want to have your private key managed, read and confirm I agree to have the private key managed by HUAWEI CLOUD. Skip this step if you do not need to have the private key managed.

    Figure 2 Managing private keys
    1. Click Select File, select the .pem private key file to be imported. Alternatively, you can copy and paste the private key content to the Private Key Content text box.
    2. Select an encryption key from the KMS Encryption drop-down list box.
      • KPS uses the encryption key provided by KMS to encrypt private keys. When the user uses the KMS encryption function of the key pair, KMS automatically creates a default master key kps/default for encryption of the key pair.
      • You can select an existing encryption key or click View Key List to create one.

  8. Read the Key Pair Service Disclaimer and select I have read and agree to the Key Pair Service Disclaimer.
  9. Click OK to import the key pair.
Parent topic: Key Pair Service