检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
DEW uses a data encryption key (DEK) to encrypt data and uses a customer master key (CMK) to encrypt the DEK. Figure 1 Data encryption process Table 1 describes the keys involved in the data encryption process.
Preparations Prepare the username and password and encrypt the password.
data keys. kms:cmk:encryptData: Encrypt data. kms:RecipientAttestation/PCR0 and kms:RecipientAttestation/PCR8 are condition keys determined during QingTian Enclave image creation.
If the image you selected is not encrypted, you can select Encryption to encrypt the system disk. Disk encryption provides strong security protection for your data.
Figure 7 Entering the key ID Use the key to encrypt a piece of plaintext, for example, "hello world!". For details, see Encrypting and Decrypting Small-size Data Online Using a Custom Key.