Help Center/ Data Security Center/ User Guide/ Trusted Key Space/ Managing Access Points
Updated on 2026-07-28 GMT+08:00
View PDF
Share

Managing Access Points

An access point is an application runtime environment, such as a cloud server, CCE cluster, or on-premises server. Only access points that comply with the key policy can unseal key capsules.

Creating an Access Point

  1. Log in to the DSC console.
  2. In the navigation pane on the left, choose Data Security Zones > Trusted Key Space.
  3. In the navigation pane of Trusted Key Space, choose Access Point Management.
  4. Click Create Access Point. On the Create Access Point page, configure parameters.

    Figure 1 Creating an access point

    Table 1 Access point parameters

    Parameter

    Description

    Access Point Name

    Access point name.

    Type

    You can select Cloud server, CCE, or General scenario.

    Access Point ID

    This parameter is mandatory when Type is set to Cloud server.

    Enter the cloud server ID.

    CCE Cluster Public Key

    This parameter is mandatory when Type is set to CCE.

    To obtain the public key of the CCE cluster, perform the following steps:

    1. Use kubectl to access the cluster.
    2. Run the following command to obtain the public key: 
      kubectl get --raw /openid/v1/jwks

      The returned result is the public key of the cluster. The following is an example of the command output:

      # kubectl get --raw /openid/v1/jwks
{"keys":[{"use":"sig","kty":"RSA","kid":"*****","alg":"RS256","n":"*****","e":"AQAB"}]}

    Cluster ID

    This parameter is mandatory when Type is set to CCE.

    On the CCE console, click a cluster name and obtain the cluster ID in the Basic Information area.

    Description (Optional)

    Description about the access point.

  5. Click OK. The Status of the created access point is Enabled.

Disabling an Access Point

  1. In the navigation pane on the left, choose Data Security Zones > Trusted Key Space.
  2. In the navigation pane of Trusted Key Space, choose Access Point Management.
  3. In the Operation column of an access point, click Disable.
  4. In the Disable Access Point dialog box, enter DISABLE and click OK.

Enabling an Access Point

  1. In the navigation pane on the left, choose Data Security Zones > Trusted Key Space.
  2. In the navigation pane of Trusted Key Space, choose Access Point Management.
  3. In the Operation column of an access point, click Enable.
  4. In the Enable Access Point dialog box, click OK.

Deleting an Access Point

  1. In the navigation pane on the left, choose Data Security Zones > Trusted Key Space.
  2. In the navigation pane of Trusted Key Space, choose Access Point Management.
  3. In the Operation column of an access point, click Delete.
  4. In the Delete Access Point dialog box, enter DELETE and click OK.
Parent Topic: Trusted Key Space