平安云|Ping An Cloud- Building Your Smart Future

Bind a Key Pair to an Instance

This article describes how to bind a key pair to an ECS instance. Restriction 1．After a key pair is bound to an ECS instance, the original login password would become invalid. 2．A Linux instance can be bound with one SSH key pair only. 3．A SSH key pair can be bound to multiple instances. Prerequisites You have created a custom login password, or created ECS instances for Linux OS with password as login method. For more information, see Create an Instance. Procedures 1．Log in to the <a href="#https://yun.pingan.com/console/ecs/overview" target="_blank">ECS Console</a>. 2．In the left navigation pane, click Keys to enter the Keys page. 3．Select the target region, and in the operation column of the target key pair click Binding. 4．In the Binding that opens , check the target ECS instance and click Confirm. 5．In the Verification Code dialog box that opens, enter the verification code. 6．Click Confirm. Note: After the keys are bound to the ECS instance, a .pem-format private key will be downloaded and please keep it properly. Result After the binding is completed, the number under Binded Instances of the target key pair will be updated. Click the number, you can enter the Instance Management page to view the instance bound with the key pair.   Relevant Procedures Connect a key pair to a Linux instance to which the pair is bound. Prerequisites 1．You have created ECS instances successfully. For more information, see Create a Linux Instance. 2．The key pair can be downloaded for once. Keep it properly. To download it again, you need to unbind it from the ECS instance to generate a new pair. 3．The private key is in the PKCS#8 format encoded with the unencrypted PEM (Privacy-enhanced Electronic Mail) Windows Operating System Example 1: Connection with PuTTY Procedures 1.      Create Keys （1）    Log in to the ECS Console. （2）    In the left navigation pane, click Keys to enter the Keys page. （3）    In the upper-right corner, click Create, and the Create Key dialog box will open. （4）    Enter description, select create way and click Confirm. （5）    The .pem-format private key will be downloaded to your computer. Note <ul> <li>After you click confirm, the private key will be downloaded to the local immediately. Ping An Cloud will not keep it, and it cannot be downloaded again. Please keep it properly.</li> <li>When the key pair is bound to an ECS instance, even with a username and password, you still cannot log in to the instance without the private key.</li> </ul> 2.      Bind Keys to Instances （1）    Log in to the ECS Console. （2）    In the left navigation pane, click Keys to enter the Keys page. （3）    In the operation column of the target key, click Binding i, and the Binding dialog box will open. （4）    Select the target instance, and click Confirm. （5）    In the Verification Code dialog box that opens, enter the verification code, and click Confirm to complete the binding operation. 3.      Convert Key Pair Format （1）    Double click to open PuTTYgen. （2）    In the Actions section, click Load, import the generated key pair file, and then select All files (*.*) as the importing format. （3）    Click Save private key. （4）    In the warning dialog box that opens, select the directory for storing the keys and enter key name.ppk behind the file name. For example, save EC-YD60002.pem private key as EC-YD60002.ppk key. 4.      Connect to Linux Instance （1）    Double click to open PuTTY. （2）    Click Connection > SSH > Auth. （3）    Click Browse, and in the dialog box that opens select the storage directory for the key. （4）    Select the target key, click Open and upload the key that has been converted into .ppk format. （5）    Click Session to configure the following information: <ul> <li>Host Name (or IP address): Enter the Internet IP of the ECS instance.</li> <li>Connection type: SSH is selected by default.</li> <li>Saved Session (optional): You may enter an easy-to-identify name, so that next time you can enter the login page directly without entering information again. Click Save.</li> </ul> （6）    Click Open. 5.      Verification succeeded and you will log in to the Linux instance. Example 2: Connection with Xshell Procedures 1.      Double click to open Xshell. 2.      Click Tools > User Key Manager (U). 3.      In the User Keys dialog box that opens, select the pem file saved before and click Import. 4.      In the Connection area, create a new connection, enter name, protocol, IP and port number 22. 5.      Click User Identity Authentication to configure the following information: <ul> <li>Method(M): Select Public Key.</li> <li>Username(U): Enter root.</li> <li>User key(K): Select the imported pem key.</li> </ul> 6.      In the SSH Security Warning dialog box that opens, click Accept and Save. Linux Operating System Client If your uses a Linux operating system client, you can name the key with the following steps. 1.      Change authorization with so that only the owner can read the private key by executing chmod 400<the storage directory of the private key bound to the ECS instance> For example, chmod 400 / Downloads/ EC-YD60002.pem 2.      Execute the following command for remote login. ssh -i <the storage directory of the private key bound to the ECS instance> root@ <IP address> For example: ssh -i / Downloads/ EC-YD60002.pem root@101.xxx.xxx.xxx

Did the above content solve your problem? Yes No