Help Center/ Data Encryption Workshop/ User Guide (Ally Region)/ FAQs/ KPS Related/ How Do I Create a Key Pair?
Updated on 2026-03-19 GMT+08:00
View PDF
Share

How Do I Create a Key Pair?

Creating a Key Pair Using the Management Console

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security > Data Encryption Workshop.
  4. In the navigation pane on the left, click Key Pair Service.
  5. Click Create Key Pair. On the displayed page, enter the key pair name.
  6. (Optional) Select a key pair type.

    • When you create a private key pair, this parameter is available only when there is an account key pair under the account. The account key pair can be either created or upgraded from a private key pair. Otherwise, only the default SSH_RSA_2048 key pair is created.
    • Currently, only the RSA algorithm can be used with Windows.

  7. Read and select I agree to host the private key of the key pair if needed. Select an encryption key from the KMS encryption drop-down list box. Skip this step if not needed.

    • KPS encrypts private keys using the encryption key provided by KMS. When you use the KMS encryption function of the key pair, KMS creates a default key kps/default for you to use.
    • For details about how to create a custom key on KMS, see "Creating a Key".

  8. Click OK. The browser automatically downloads the private key.

    • If the private key is not managed, it can be downloaded only once. Keep it properly. If the private key is lost, you can bind a key pair to the ECS again by resetting the password or key pair. For details, see section "How Do I Handle the Failure in Logging In to ECS After Unbinding the Key Pair?" in Data Encryption Workshop FAQ.
    • If you have authorized the cloud to manage the private key, you can export the private key anytime as required.

Creating a Key Pair Using PuTTYgen

  1. Generate the public and private keys. Double-click PuTTYgen.exe. The PuTTY Key Generator page is displayed, as shown in Figure 1.

    Figure 1 PuTTY Key Generator

  2. Configure the parameters as described in Table 1.

    Table 1 Parameter description

    Parameter

    Description

    Type of key to generate

    Encryption and decryption algorithm of key pairs to be imported to the management console. Currently, only SSH-2 RSA is supported.

    Number of bits in a generated key

    Length of a key pair to be imported to the management console. Currently, the following length values are supported: 1024, 2048, and 4096.

  3. Click Generate to generate a public key and a private key. See Figure 2.

    Contents highlighted by the blue-line box show a generated public key.
    Figure 2 Obtaining the public and private keys

  4. Copy the information in the blue square and save it in a local .txt file.

    Do not save the public key by clicking Save public key. If you save a public key using Save public key, the public key format will be changed and cannot be imported to the management console directly.

  5. Save the private key in PPK or PEM format.

    For security purposes, the private key can only be downloaded once. Keep it secure.

    Table 2 Format of a private key file

    Private Key File Format

    Private Key Usage Scenario

    Saving Method

    PEM
    • Use the Xshell tool to log in to the cloud server running the Linux operating system.
    • Manage the private key on the management console.
    1. Choose Conversions > Export OpenSSH key.
    2. Save the private key, for example, kp-123.pem, to a local directory.

    Obtain the password of a cloud server running the Windows operating system.
    1. Choose Conversions > Export OpenSSH key.
      NOTE:

      Do not enter the Key passphrase information. Otherwise, the password fails to be obtained.

    2. Save the private key, for example, kp-123.pem, to a local directory.

    PPK

    Use the PuTTY tool to log in to the cloud server running the Linux operating system.
    1. On the PuTTY Key Generator page, choose File > Save private key.
    2. Save the private key, for example, kp-123.ppk, to a local directory.

    After the public key and private key are correctly saved, you can import the key pair to the management console.

Parent topic: KPS Related