Help Center/ Image Management Service/ Best Practices/ IMS Security
Updated on 2025-05-08 GMT+08:00
View PDF
Share

IMS Security

Huawei Cloud and you share the responsibility for security. Huawei Cloud ensures the security of cloud services. As a tenant, you should take advantage of the security capabilities provided by Huawei Cloud to protect your data and use the cloud securely. For details, see Shared Responsibilities.

This section provides actionable guidance for enhancing the overall security of IMS.

Consider the security configurations from the following aspects:

Create an Encrypted Image from an Image File

  1. Upload an image file to an OBS bucket.
  2. On the IMS console, select Import Image for Type and System disk image, Data disk image, or ISO image for Image Type. If the image file is in ZVHD2 or RAW format, do not select Enable Fast Create.
  3. Select KMS encryption and select a key from list. An encrypted image will be created.

Create an Encrypted Image from an Encrypted ECS

When you use an ECS to create a private image, if the system disk of the ECS is encrypted, the private image created from this ECS will also be encrypted.

The key used for encrypting the image is the same as that used for encrypting the system disk.

Create an Encrypted Image by Replicating an Image

If you want to convert an unencrypted image into an encrypted one, you can replicate this image as a new one and encrypt the new image using a key.