Purchasing an HSS Quota

Precautions

• The quota can be used only in the region where you bought it.
• A quota can be bound to a server to protect it, on condition that the agent on the server is online.
• Currently, HSS can only protect Docker, Containerd, CRI-O, Podman, and iSulad containers. Check your container type before purchasing the container edition.
• The enterprise edition is no longer sold. You are advised to purchase the premium edition to protect your servers.
• HSS should be deployed on all your servers so that if a virus infects one of them, it will not be able to spread to others and damage your entire network.
• After purchasing quota, go to the Servers & Quota page to enable HSS.

Regions

Prerequisites

The account must have the BSS Administrator and HSS Administrator permissions. If the account does not have the permissions, use a management account to purchase quotas or authorize member accounts to purchase quotas. For details about authorization, see Creating a User and Granting Permissions.

Purchasing an HSS Quota

1. Log in to the management console.
2. Click in the upper left corner of the page, select a region, and choose Security & Compliance > Host Security Service to go to the HSS management console.
3. In the upper right corner of the Overview page, click Buy HSS.
4. On the Buy HSS page, set the quota specifications.

   Table 2 Parameters for purchasing HSS

   Parameter	Description	Example Value
   Region	You are advised to purchase quota in the region of your servers. HSS cannot be used across regions. If you purchased a quota in a wrong region, unsubscribe from it and purchase a quota in the region of your servers. Only some regions allow non-Huawei Cloud servers to access HSS through the Internet. For details, see In What Regions Is HSS Available to Non-Huawei Cloud Servers? Purchase HSS in the regions where non-Huawei Cloud servers can be connected.	CN-Hong Kong
   Billing Mode	Select Yearly/Monthly or Pay-per-use billing mode based on your requirements. Yearly/Monthly: You can buy a yearly or monthly subscription. It is 30% cheaper than the pay-per-use mode for the same service duration. If you plan to use HSS for a long time, you are advised to choose this mode. It supports the HSS basic, professional, premium, WTP, and container editions. Pay-per-use: You pay for the duration you use the resources. Prices are calculated by hour, and no minimum fee is required. This billing mode supports the HSS professional, premium, container, and WTP editions. NOTE: Procedure for enabling pay-per-use quota: On the purchase page, select Pay-per-use. In the lower right corner, click Enable Now. You will be redirected to the server list. In the Operation column of a server, click Enable. Set Billing Mode to Pay-per-use and select an edition. After confirming the information, select I have read and agree to the Host Security Service Disclaimer. Click OK.	Yearly/Monthly
   Edition	The basic, professional, premium,WTP, and container editions are supported. For details about the differences between editions, see Editions.	Professional Edition
   Value-added Services	Container image scans are billed per use. If you need to scan repository and CI/CD images, enable this function. You will be charged per successful scan per image.	Selected
   Enterprise Project	This option is only available when you are logged in using an enterprise account, or when you have enabled enterprise projects. To enable this function, contact your customer manager. An enterprise project provides a cloud resource management mode, in which cloud resources and members are centrally managed by project. Select an enterprise project from the drop-down list. NOTE: Resources and incurred expenses are managed under the enterprise project you selected. Value default indicates the default enterprise project. Resources that are not allocated to any enterprise projects under your account are displayed in the default enterprise project.	default
   Tag	Tags are used to identify cloud resources. When you have many cloud resources of the same type, you can use tags to classify cloud resources by dimension (for example, by usage, owner, or environment). To use this function, your account must have the TMS administrator permission. Without this permission, you cannot add tags to protection quotas, and the error message "permission error" will be displayed. You do not need to set this parameter in pay-per-use mode.	data
   Quota Management	After automatic quota binding is enabled, HSS automatically binds available quotas to new servers or container nodes after the agent is installed for the first time. Only the yearly/monthly quotas that you have purchased can be automatically bound. No new order or fee is generated. Servers: Available yearly/monthly quotas are automatically bound in the following sequence: Premium Edition > Enterprise Edition > Professional Edition > Basic Edition. Container nodes: Available yearly/monthly quotas are automatically bound in the following sequence: Container Edition > Premium Edition > Enterprise Edition > Professional Edition > Basic Edition. If you use enterprise projects, this configuration only enables automatic quota binding for the selected enterprise project.	Selected
   Required Duration	Select a duration based on your requirements. In Pay-per-use mode, you do not need to select a duration. You are advised to select Auto-renew to ensure your servers are always protected. If you select Auto-renew, the system will automatically renew your subscription as long as your account balance is sufficient. The renewal period is the same as the required duration. If you do not select Auto-renew, manually renew the service before it expires.	1 year
   Quantity	Set the quantity according to the number of server or container nodes to be protected. This parameter is not required in the Pay-per-use mode.	20

5. In the lower right corner of the page, click Next.

   For details about pricing, see Product Pricing Details.

6. After confirming that the order, select I have read and agree to the Host Security Service Disclaimer and click Pay Now.
7. Click Pay Now and complete the payment.

   Return to the HSS console, choose Asset Management > Servers & Quota, click the Quotas tab, and check the purchased quota.

Follow-up Procedure

After the quota purchase is complete, install the agent on the server or container node.

• For details about how to install the agent on a server or a single container node, see Installing the Agent on Servers.
• For details about how to install the agent on a cluster, see Installing an Agent in a Cluster.

Related Operations

If you purchased HSS in the wrong edition or region, you can first unsubscribe from it and then purchase the correct quota.