Binding a Key Pair

Prerequisites

• The ECS must be in the Running or Shut down state.
• The ECS has not been bound to a key pair.
• The ECS whose key pair is to be reset uses the public image provided by Huawei Cloud.
• To bind to a key pair, you can write the public key of the user to the /root/.ssh/authorized_keys file on the server. Ensure that the file is not modified before binding to the key pair. Otherwise, the binding will fail.
• The SSH port (22 by default) of the ECS security group must allow traffic from the 100.125.0.0/16 CIDR block in advance.

Constraints

• On the management console, key pairs cannot be bound to ECSs that run Windows.
• Key pairs cannot be bound to public images running CoreOS, OpenEuler, FreeBSD (Other), Kylin V10 64-bit, or UnionTech OS Server 20 Euler 64-bit.

Binding a Key Pair

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner and choose Security & Compliance > Data Encryption Workshop.
4. In the navigation pane on the left, click Key Pair Service.
5. Click ECS List to view ECSs.
6. Click Bind in the row of an ECS to open the Bind Key Pair dialog box.
   • If the ECS is shut down, a dialog box will be displayed, as shown in Figure 1.
     Figure 1 Binding a key pair (1)
     
   • If the ECS is running, you need to provide the root password, as shown in Figure 2.
     Figure 2 Binding a key pair (2)
     
     NOTE:

     • If you have the root password of the ECS, you can directly enter the password to bind the key pair to the ECS.
     • If you do not have the root password of the ECS, you can shut down the ECS, and bind the key pair when the ECS is in Shut down state.

7. Select a new key pair from the drop-down list box of New Key Pair.
8. The default port number is 22 and can be modified.
   NOTE:

   Before using user-defined port, ensure that:

   • The key pair can be connected to the ECS using the port. For details about how to modify the security group configuration of an ECS, see Configuring Security Group Rules.
   • Modify the default port of the ECS and ensure that the port is enabled. For details, see Enhancing Security for SSH Logins to Linux ECSs.

9. You can choose whether to disable the password login mode as necessary. By default, the password login mode is disabled.
   NOTE:

   • If you do not disable the password login mode, you can use the password or the key pair to log in to the ECS.
   • If the password login mode is disabled, you can use only the key pair to log in to the ECS. If you need to use the password login mode later, you can enable the password login mode again. For details, see How Do I Enable the Password Login Mode for an ECS?.

10. Read and select I have read and agree to the Key Pair Service Disclaimer.
11. Click OK to complete the operation.
    • If the ECS is not shut down, use the root password to bind the key pair. It takes about 30 seconds to complete.
    • If the ECS is shut down, the binding operation may take about five minutes.