Help Center/ Data Encryption Workshop/ User Guide (Ally Region)/ KPS/ Importing a Key Pair
Updated on 2026-03-19 GMT+08:00
View PDF
Share

Importing a Key Pair

If you need to use your own key pair (for example, using the key pair created by the PuTTYgen tool), you can import the public key to the management console and use its private key to remotely log in to an ECS. You can also manage the private key on the management console of the cloud as needed.

If multiple IAM users need to use the same key pair, use another tool (such as PuTTYgen) to create a key pair and import it for each of the IAM users separately.

Prerequisites

  • The public and private key files of the key pair to be imported are ready.
  • The imported key pair is an account key pair. If a private key pair with the same name has been created, a message will be displayed, indicating that the name already exists.
  • Each IAM user does not have a private key pair with the same name.
  • PKCS8 is supported for imported private keys. Convert the format if PKCS1 is used.

Constraints

  • The format of the private key file that can be imported is PEM.

    If the file is in the .ppk format, convert it to a .pem file. For details, see "How Do I Convert the Format of a Private Key File?" in Data Encryption Workshop FAQs.

  • If the imported private key is encrypted, the upload will fail.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click . Choose Security > Data Encryption Workshop.
  4. In the navigation pane on the left, click Key Pair Service.
  5. Click Import Key Pair. In the displayed , click , or paste the public keys in the Public Key Content text box.

    • You can customize the name of an imported key pair.

  6. Read and select I agree to host the private key of the key pair if needed. Skip this step if not needed.

    1. Copy and paste the private key content to the Private Key Content text box. Alternatively, click Select File and select the .pem private key file.
    2. Select an encryption key from the KMS Encryption drop-down list box.
      • KPS encrypts private keys using the encryption key provided by KMS. When you use the KMS encryption function of the key pair, KMS creates a default key kps/default for you to use.
      • For details about how to create a custom key on KMS, see "Creating a Key".

  7. Click OK to import the key pair.
Parent topic: KPS