When you enable node protection, the system automatically installs the CGS plug-in on the node.

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > Host Security Service.
   Figure 1 Accessing HSS
   

3. In the displayed dialog box, click Try the new edition to switch to the HSS (New) console.
   

   • Currently, HSS is available in the following regions: CN South-Guangzhou, CN-Hong Kong, AP-Bangkok, and AP-Singapore.
   • On the HSS (New) console, you can click Back to Old Console in the upper left corner to switch to the HSS (Old) console.

4. In the navigation pane, choose Asset Management > Containers & Quota.
5. In the Operation column of the node list, click Enable Protection.
6. In the displayed dialog box, read and select I have read and agree to the Container Guard Service Disclaimer.
7. Click OK to enable protection for the node. If Protection Status of the node is Protected, protection is enabled for the node.
   

   • If you enable protection for nodes exceeding your purchased protection quota, the excess nodes will be charged on a pay-per-use basis. For details about the pay-per-use billing mode of Host Security Service (HSS), see When and How Will CGS Be Charged Per Use?
   • When you enable protection for a node, the system automatically installs the CGS shield plug-in on the node.
   • One HSS quota protects one cluster node.