检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Uploading an Image File Exporting an Image Data Encryption Workshop (DEW) Images can be encrypted through envelope encryption of DEW to ensure data security. The keys used for encrypting images are stored in DEW.
Encrypted images do not support fast export. Exporting an Image Figure 1 Fast import of an image file Figure 2 Fast export Parent topic: Image Export
Private images can be encrypted for data security by using envelope encryption provided by Key Management Service (KMS). Flexible You can manage images through the management console or using APIs.
For how to encrypt an image, see Creating an Encrypted Image. NOTE: If the encrypted image needs to be shared with other tenants, use a custom key to encrypt it. Otherwise, the key cannot be authorized to other tenants, causing the sharing failure.
ISO images and encrypted images cannot be replicated across regions. Procedure Log in to the management console. Under Compute, click Image Management Service. The IMS console is displayed.
Enable the key. 400 IMG.0098 The encrypted image cannot be shared or published in Marketplace. The encrypted image cannot be shared or published in KooGallery.
Encrypted images cannot be replicated across regions. The size of each image to be replicated across regions cannot be larger than 128 GB. A maximum of five private images can be replicated at a time. Private images created from ISO files cannot be replicated across regions.
If the data disk is not encrypted, the private image created from it is also not encrypted. The encryption attribute cannot be changed during image creation. After the image is created, you can change its encryption attribute based on Replicating Images Within a Region.
Only unencrypted external image files or those encrypted using SSE-KMS can be uploaded to an OBS bucket. Only unencrypted ISO image files can be uploaded to an OBS bucket. In an OBS bucket, only unencrypted external image files can use fast import.