检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Encrypted images do not support fast export. Exporting an Image Figure 1 Fast import of an image file Figure 2 Fast export Parent topic: Image Export
Private images can be encrypted for data security by using envelope encryption provided by Key Management Service (KMS). Flexible You can manage images through the management console or using APIs.
Constraints For an encrypted image, you must have permissions for KMS actions. An image can only be exported to a Standard bucket that is in the same region as the image.
Constraints For an encrypted image, you must have permissions for KMS actions. Full-ECS images cannot be replicated within the same region. Private images created using ISO files do not support in-region replication.
For how to encrypt an image, see Creating an Encrypted Image. NOTE: If the encrypted image needs to be shared with other tenants, use a custom key to encrypt it. Otherwise, the key cannot be authorized to other tenants, causing the sharing failure.
ISO images and encrypted images cannot be replicated across regions. Procedure Log in to the management console. Under Compute, click Image Management Service. The IMS console is displayed.
Enable the key. 400 IMG.0098 The encrypted image cannot be shared or published in Marketplace. The encrypted image cannot be shared or published in KooGallery.
If the data disk is not encrypted, the private image created from it is also not encrypted. The encryption attribute cannot be changed during image creation. After the image is created, you can change its encryption attribute based on Replicating Images Within a Region.
Encrypted images cannot be replicated across regions. The size of each image to be replicated across regions cannot be larger than 128 GB. A maximum of five private images can be replicated at a time. Private images created from ISO files cannot be replicated across regions.
Constraints To create an encrypted image, you must have permissions for KMS actions. URI POST /v2.1/cloudimages/dataimages/action Request Request parameters Parameter Mandatory Type Description name Yes String Specifies the image name.
Only unencrypted external image files or those encrypted using SSE-KMS can be uploaded to an OBS bucket. Only unencrypted ISO image files can be uploaded to an OBS bucket. In an OBS bucket, only unencrypted external image files can use fast import.
Constraints For an encrypted image, you must have permissions for KMS actions. Before importing an image file, ensure that the file format is RAW or ZVHD2 and the following have been done: For RAW, the image file has been optimized, and a bitmap file has been generated.
Constraints To create an encrypted image, you must have permissions for KMS actions. Creating a private image using an external image file For details about constraints on image files, see Preparing an Image file.
