检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
As data needs to be encrypted and decrypted, you may experience a slight decrease in performance when encrypted transmission is used. Configuring Encrypted Transmission and Mounting the File System (Linux) Install stunnel.
Creating and Unmounting an Encrypted File System Creating an Encrypted File System To create encrypted SFS Turbo file systems, no authorization is required.
"vpc:*:*" Creating an encrypted SFS Turbo file system requires the KMS Administrator permissions.
Only PEM encrypted key files (old OpenSSH format) are supported. Encrypted keys in the new OpenSSH format can't be used. y) Yes type in my own password g) Generate random password n) No leave this optional password blank y/g/n> n When set forces the usage of the ssh-agent.
Only PEM encrypted key files (old OpenSSH format) are supported. Encrypted keys in the new OpenSSH format can't be used. y) Yes type in my own password g) Generate random password n) No leave this optional password blank y/g/n> n When set forces the usage of the ssh-agent.
You can create a file system that is encrypted or not, but you cannot change the encryption attribute of an existing file system.
AK/SK authentication: Requests are encrypted using AK/SK pairs. AK/SK authentication is recommended because it is more secure than token authentication. Token Authentication The validity period of a token is 24 hours.
Data Encryption Creating and Unmounting an Encrypted File System Protecting Data in Transit Using Encrypted Transmission
Keys used by encrypted file systems are provided by the Key Management Service (KMS), which is secure and convenient. You do not need to establish and maintain the key management infrastructure.
Table 5 Metadata Parameter Mandatory Type Description crypt_key_id No String The ID of a KMS professional key, which is used to create an encrypted file system. dedicated_flavor No String The VM flavor, which is used to create a dedicated file system. dedicated_storage_id No String
Encrypted Transmission Encrypted transmission allows you to protect your data transmitted between clients and SFS Turbo file systems using the TLS protocol. You are advised to use the TLS protocol to access data in SFS Turbo file systems.
