Prerequisites

You have obtained the login account (with the Ticket Administrator and KMS Administrator permissions) and password for logging in to the management console.

Constraints

• When purchasing a Dedicated HSM instance, you need to submit a service ticket to set the UKey recipient information. Only the accounts with the Ticket Administrator permission can submit service tickets.
• After your purchase completes, a Huawei Cloud security expert will reach you based on your contact information in the service ticket system, confirm with you on your delivery address, and send the HSM management software to you. For details about how to set your contact information, see Set UKey Recipient Information.
• The UKeys (or IC cards) of the platinum edition (Chinese mainland) are kept by HUAWEI CLOUD equipment room administrators. If you need to perform UKey-related operations, contact our security experts, and they will arrange an administrator to complete the operations for you.
• You can buy instances of platinum edition (Chinese mainland) only in yearly or monthly packages. A purchased instance cannot be directly deleted.
• For reliability purposes, you need to purchase at least two Dedicated HSM instances. If you want to purchase only a single instance for testing, contact our Huawei Cloud security experts.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click . Choose Security & Compliance > Data Encryption Workshop.
4. In the navigation pane, choose Dedicated HSM > Instances (New).
5. Click Create Dedicated HSM in the upper right corner of the page.
6. Billing Mode can only be set to Yearly/Monthly.
   Figure 1 Billing Mode
   

7. Select a region and project.
   Figure 2 Selecting a region
   
   

   • Select the current region and the default project.
   • Only the default project is supported. User-defined projects cannot be created.

8. Select the service edition for the instance. See Figure 3 for details. Table 1 lists related parameters.
   Figure 3 Platinum edition (Chinese mainland)
   

   Table 1 Edition parameters

   Parameter	Description	Example Value
   Service Edition	You can select the Standard edition or Platinum edition (Chinese mainland) as required.	Platinum edition (Chinese mainland)
   Algorithm	Encryptions algorithm supported by the platinum edition (Chinese mainland), including: Symmetric algorithm: SM1, SM4, AES, SM7* Asymmetric algorithm: SM2, RSA (1024-4096) * Digest algorithm: SM3, SHA1, SHA256, and SHA384 NOTE: The items with an asterisk (*) vary according to the device model. Contact the customer service personnel for details.	-
   Instance Class	Performance specifications supported by the platinum edition (Chinese mainland), including: Data communication protocol: TCP/IP (maximum number of concurrent connections: 2048) SM1 Encryption Computing Performance: 15,000 times/s SM2 signature computing performance: 80,000 times/s SM2 signature verification computing performance: 15,000 times/s RSA2048 Public Key Computing Performance: 40,000 times/s RSA2048 Private Key Computing Performance: 4,000 times/s SM7 Encryption Computing Performance: 1,000 times/s * NOTE: The items with an asterisk (*) vary according to the device model. Contact the customer service personnel for details.	-

9. Select a deployment mode.

   Select Single AZ or Dual AZs.

10. Type the instance name.
    Figure 4 Setting an instance name
    

11. Set the duration and number of Dedicated HSM instances to be purchased.
    1. Set the required duration.

       The required duration ranges from one month to one year.

    2. Set the Quantity.

       You can set the quantity as required.

       To ensure high service reliability, you need to purchase at least two Dedicated HSM instances. You can purchase a maximum of 20 Dedicated HSM instances.

       

       A single instance is only suitable for testing. If you want to purchase one for testing, contact our Huawei Cloud security experts.

    3. Confirm the price (¥).
       • Initial installation: 90,000/unit (pay now)
       • Monthly package: 10,000/instance per month (pay upon activation)
    Figure 5 Estimated cost
    

12. Set the UKey Recipient Information.
    1. Click service ticket system.
       Figure 6 Service ticket system
       
    2. The Create Service Ticket page is displayed. Set the UKey recipient information. For details, see Figure 7.
       • In the text box of Problem Description, enter UKey Recipient Information.
       • Select General guidance for Case Severity.
       • Contact Information: Enter the phone number and email address to receive the progress information of the service ticket.
       Figure 7 Creating a service ticket
       
    3. After filling in the information, click Submit. The My Service Tickets page is displayed showing the service tickets that you have submitted.
       

       After the service ticket is created successfully, you can click the content under Problem in the row of this service ticket to view its details, and perform operations like reminding the customer service, leaving a message, canceling the service ticket, and closing the service ticket.

13. Confirm the configuration and click Next.

    For any doubt about the pricing, click Pricing details to understand more.

14. On the Order Details page, confirm the order details, read and select I have read and agree to the Privacy Policy Statement.
15. Click Pay Now to pay for the installation.
16. On the Pay page, select a payment method to pay for your order.

    After successful payment, you can view the information about the HSM instance on the HSM instance list page.

    If the status of an HSM instance is Installing, it indicates that the instance is purchased successfully.