tencent cloud

Secrets Manager

Product Introduction
Overview
Features
Use Cases
Purchase Guide
Billing Overview
Purchase Methods
Overdue Payment Policies
Getting Started
Operation Guide
Custom Secret
Database Credential
CVM SSH Key Secret
Log Audit
Access Control
Practical Tutorial
Hosting and Using Secrets
Rotating Hosted Secrets
API Documentation
History
Introduction
API Category
Making API Requests
Data Security APIs
Other APIs
Data Types
Error Codes
FAQs
Service Level Agreement
Contact Us
Glossary

Creating an SSH Key Secret

PDF
Focus Mode
Font Size
Last updated: 2024-01-02 15:07:13

Scenarios

This document describes how to create an SSH key pair and encrypt the SSH private key on the SSM console.
Note:
You should meet the following requirements to use CVM SSH Key.
You have enabled KMS services, as SSM encrypts data based on keys managed in KMS.
You have created a CVM instance. For details, see Guidelines for Creating Instances.

Directions

1. Log in to the SSM Console and click CVM SSH Key on the left sidebar.

2. On the CVM SSH Key page, click the drop-down list in the top left corner to select a region.

3. Click Create in the top left corner of this page to create an SSH key secret.
4. Enter the information and then click OK. You will see the new secret at the top of the list on the management page.

Field description
Secret Name: must be unique in the same region. It supports up to 128 bytes of letters, digits, hyphens and underscores and must begin with a letter or digit.
Description: description, such as what it is used for. It contains up to 1,024 bytes.
Project ID: ID of the project to which the created key pair belongs.
Tag: optional item.
Encryption Key:
Use the default CMK that SSM has created in KMS.
Use a custom encryption key.
Note:
If you are using SSM, you have activated KMS. You can create an encryption key in either of the following ways:
Use the default Tencent Cloud managed CMK created on the KMS console as encryption key, and use the envelope encryption method for encrypted storage.
Use a custom key created on the KMS console as encryption key for encrypted storage.

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback