<p class="shortdesc">You can use the Ping An Cloud KMS console to create CMKs. </p> <section class="section context"><div class="tasklabel"><h2 class="doc-tairway">About this task</h2></div> <p class="p">CMKs are master keys you create with Ping An Cloud KMS. You can use them to encrypt and decrypt data keys, and generate envelopes. You can also use them to directly encrypt and decrypt small amounts of data. </p> </section> <section id="Create__steps_shg_yld_flb"><div class="tasklabel"><h2 class="doc-tairway">Procedure</h2></div><ol class="ol steps" id="Create__steps_shg_yld_flb"><li class="li step stepexpand" id="Create__step_ddb_cth_flb"> <span class="ph cmd">Log in to the <a class="xref" href="https://pinganyun.com/console/kms" target="_blank">Key Management Service Console </a>. </span> </li><li class="li step stepexpand" id="Create__step_vgp_cth_flb"> <span class="ph cmd">In the left navigation pane, click <span class="ph menucascade"><span class="ph uicontrol">Keys </span><abbr title="and then"> > </abbr><span class="ph uicontrol">Customer managed keys</span></span>. </span> </li><li class="li step stepexpand"> <span class="ph cmd"> On the <span class="keyword wintitle">Customer managed keys </span>page, click <span class="ph uicontrol">+Create </span>in the upper-right corner. </span> </li><li class="li step stepexpand"> <span class="ph cmd">On the <span class="keyword wintitle">Create Key </span>page, configure a CMK by completing the following information. </span> <div class="itemgroup info"> <img class="image" id="Create__image_pbk_hh5_jlb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20200807112323-18a4fd6196bc.png"> <ul class="ul" id="Create__ul_kqz_f4z_3lb"> <li class="li"><span class="ph uicontrol">Purpose</span>: ENCRYPTE/DECRYPT by default. </li> <li class="li"><span class="ph uicontrol">Currently Selected Area</span>: Select the region of the CMK. </li> <li class="li"><span class="ph uicontrol">Alias</span>: Alias of the CMK. Using an alias to refer to a CMK can help you to identify different CMKs. </li> <li class="li"><span class="ph uicontrol">Description</span>: Description about the CMK. For example, you can enter information about the data or applications you want to protect using the CMK. </li> </ul> <p class="p">Click <span class="ph uicontrol">Advanced Options</span>. On the page that expands, you can select the origin of key material and the encryption standard. </p> <img class="image" id="Create__image_lln_jh5_jlb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20200807112323-1c66bcbc90eb.png"> <ul class="ul" id="Create__ul_ejb_h4z_3lb"> <li class="li"><strong class="ph b">Key Material Source</strong>: <ul class="ul" id="Create__ul_ovc_l4z_3lb"> <li class="li"> <p class="p"><span class="ph uicontrol"> PingAn Cloud KMS</span>: Ping An Cloud generated CMKs. </p> </li> <li class="li"> <p class="p"><span class="ph uicontrol">External</span>: Ping An Cloud KMS does not generate key material for the CMK and you can import external key material. For more information, see <a class="xref" href="https://pinganyun.com/ssr/help/manage/kms/Guide.keyimport.overview" target="_blank">Import Key Material</a>. </p> </li> </ul></li> <li class="li"><span class="ph uicontrol">Encryption standard</span>: Select <span class="ph uicontrol"> International standard </span>(256 bits or 128 bits). </li> </ul> </div> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Confirm</span>. </span> </li></ol></section> <section class="section result" id="Create__result_mzx_p4z_3lb"><div class="tasklabel"><h2 class="doc-tairway">Results</h2></div> <ul class="ul" id="Create__ul_fvz_k35_jlb"> <li class="li"> <p class="p">When you create a CMK, if the selected key material origin is PingAn Cloud KMS, KMS generates a CMK in the <span class="ph uicontrol">ENABLE </span>status. It is displayed in the Keys area. </p> </li> <li class="li"> <p class="p">When you create a CMK, if the selected key material origin is External, KMS generates a CMK in the <span class="ph uicontrol">PENDING_IMPORT </span>status with no key material. You can import your own key material into that CMK. </p> </li> </ul> </section>