Encrypting Images

Constraints

• DEW must be enabled.
• An image encrypted using the default key cannot be shared with other users.
• The system disk of an ECS created from an encrypted image is also encrypted, and its key is the same as the image key.
• If an ECS has an encrypted system disk, private images created from the ECS are also encrypted.
• The key used for encrypting an image cannot be changed.
• If the key used for encrypting an image is disabled or deleted, the image is unavailable.
• Encrypted full-ECS images cannot be replicated across regions.

Introduction

You can create an encrypted image from an image file or an encrypted ECS.

• Create an encrypted image from an image file.

  When you register an image file as a private image, select KMS encryption and select a key. For details, see Creating a Windows System Disk Image from an Image File and Creating a Linux System Disk Image from an Image File.

• Create an encrypted image from an encrypted ECS.

  When you use an ECS to create a private image, if the system disk of the ECS is encrypted, the private image created from this ECS will also be encrypted. The key used for encrypting the image is the same as that used for encrypting the system disk. For details, see Creating a Windows System Disk Image from a Cloud Server and Creating a Linux System Disk Image from a Cloud Server.