Secure Transmission

After receiving migration commands from SMS, the Agent on the source server dynamically generates multiple SSH key pairs as well as multiple SSL certificates and private keys. The Agent then sends the SSH key pairs to Huawei Cloud Metadata Service. After the target server obtains the SSH key pairs from Huawei Cloud Metadata Service and restarts, the Agent sets up an SSH connection from the source server to the target server using the SSH key pairs. Then the Agent transmits the SSL certificates and private keys to the target server over the SSH connection and sets up an SSL channel from the source server to the target server.

Figure 1 Secure transmission from the source server to the target server