Updated on 2024-05-06 GMT+08:00

Functions

Key Pair Service (KPS) is a secure, reliable, and easy-to-use cloud service designed to manage and protect your SSH key pairs (key pairs for short).

As an alternative to the traditional username+password authentication method, key pairs allow you to remotely log in to Linux ECSs.

A key pair, including one public key and one private key, are generated based on a cryptographic algorithm. The public key is automatically saved in KPS, while the private key can be saved to the user's local host. You can also save your private keys in KPS and manage them with KPS based on your needs. If you have configured the public key in a Linux ECS, you can use the private key to log in to the ECS without a password. Therefore, you do not need to worry about password interception, cracking, or leakage.

Functions

Using the KPS console or APIs, you can perform the following operations on key pairs:
  • Creating, importing, viewing, and deleting key pairs
  • Resetting, replacing, binding, and unbinding key pairs
  • Managing, importing, exporting, and clearing private keys

Cryptographic Algorithms Supported by KPS

  • The SSH key pairs created on the management console support the following cryptographic algorithms:
    • SSH-ED25519
    • ECDSA-SHA2-NISTP256
    • ECDSA-SHA2-NISTP384
    • ECDSA-SHA2-NISTP521
    • SSH_RSA: The length can be 2048, 3072, and 4096 bits.
  • The SSH keys imported to the KPS console support the following cryptographic algorithms:
    • SSH-DSS
    • SSH-ED25519
    • ECDSA-SHA2-NISTP256
    • ECDSA-SHA2-NISTP384
    • ECDSA-SHA2-NISTP521
    • SSH_RSA: The length can be 2048, 3072, 4096 bits.