Prerequisites

You have obtained the login account (with the Ticket Administrator and KMS Administrator permissions) and password for logging in to the management console.

Constraints

• You can buy standard edition instances only in yearly or monthly packages. A purchased instance cannot be directly deleted.
• For reliability purposes, you need to purchase at least two Dedicated HSM instances. If you want to purchase only a single instance for testing, contact our Huawei Cloud security experts.
• When purchasing a Dedicated HSM instance, you need to submit a service ticket to set the UKey recipient information.
• After your purchase completes, a UKey will be sent to the address in your contact information. Then you can use the UKey to initialize and authorize your service applications to access the instance.

  You need to activate the instance before using it.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click . Choose Security & Compliance > Data Encryption Workshop.
4. In the navigation pane, choose Dedicated HSM > Instances (New).
5. Click Create Dedicated HSM in the upper right corner of the page.
6. Billing Mode can only be set to Yearly/Monthly.
   Figure 1 Billing Mode
   

7. Select a region and project.
   Figure 2 Selecting a region
   
   

   • Select the current region and the default project.
   • Only the default project is supported. User-defined projects cannot be created.

8. Select an instance edition. For more information, see Table 1.
   Figure 3 Standard edition
   

   Table 1 Edition parameters

   Parameter	Description
   Service Edition	Select Standard.
   Algorithm	Encryption algorithms supported by standard edition, including: Symmetric algorithm: SM1, SM4, AES, SM7* Asymmetric algorithm: SM2, RSA (1024-4096) * Digest algorithm: SM3, SHA1, SHA256, and SHA384 NOTE: The items with an asterisk (*) vary according to the device model. Contact the customer service personnel for details.
   Instance Class	Performance specifications supported by standard edition, including: Data Communication Protocol: TCP/IP with the maximum concurrent connection o 64 SM1 Encryption Computing Performance: 600 times/s SM2 signature computing performance: 3,000 times/s SM2 signature verification computing performance: 2,000 times/s RSA2048 Public Key Computing Performance: 3,500 times/s RSA2048 Private Key Computing Performance: 400 times/s SM7 Encryption Computing Performance: 1,000 times/s * NOTE: The items with an asterisk (*) vary according to the device model. Contact the customer service personnel for details.
   Certification	The HSMs have been certified by Office of State Commercial Cryptography Administration (OSCCA).

9. Type the instance name.
   Figure 4 Setting an instance name
   

10. Set the number of HSM instances to be purchased.
    1. Set the required duration.

       The required duration ranges from one month to one year.

       

       The Auto-renew option enables the system to renew your service by the purchased period when the service is about to expire.

    2. Set the Quantity.

       You can set the quantity as required.

       To ensure high service reliability, you need to purchase at least two Dedicated HSM instances. You can purchase a maximum of 20 Dedicated HSM instances.

       

       A single instance is only suitable for testing. If you want to purchase one for testing, contact our Huawei Cloud sales representative.

11. Set the UKey Recipient Information.
    1. Click service ticket system.
       Figure 5 Service ticket system
       
    2. The Create Service Ticket page is displayed. Set the UKey recipient information. For details, see Figure 6.
       • In the text box of Problem Description, enter UKey Recipient Information.
       • Select General guidance for Case Severity.
       • Contact Information: Enter the phone number and email address to receive the progress information of the service ticket.
       Figure 6 Creating a service ticket
       
    3. After filling in the information, click Submit. The My Service Tickets page is displayed showing the service tickets that you have submitted.
       

       After the service ticket is created successfully, you can click the content under Problem in the row of this service ticket to view its details, and perform operations like reminding the customer service, leaving a message, canceling the service ticket, and closing the service ticket.

12. Confirm the configuration and click Next.

    For any doubt about the pricing, click Pricing details to understand more.

13. On the Order Details page, confirm the order details, read and select I have read and agree to the Privacy Policy Statement.
14. Click Pay Now.
15. On the Pay page, select a payment method to pay for your order.

    After successful payment, you can view the information about the HSM instance on the HSM instance list page.

    If the status of an HSM instance is Installing, it indicates that the instance is purchased successfully.