Overview

The SSH key pair (referred to as "Key Pair") is a new authentication mode provided by Baidu AI Cloud for you to log in to the BCC instance remotely. The SSH key pair is different from the traditional authentication mode with user name and password.

The SSH key pair generates a pair of keys through the encryption algorithm. One key is open to the publics, which is referred to as the public key, and the other key is retained by yourself, which is referred to as the private key.

If you configure the public key in the Linux instance, you can log in to the local or another BCC instance with the private key through the SSH command or related tools without entering the password. If you log in to the Linux instance with the SSH key pair, the login with password is disabled to improve the security by default.

Usage Limits

You need to pay attention to the following restrictions when you use the SSH key pair:

• The Linux instances are supported only.
• A Baidu AI Cloud account can possess up to 500 key pairs in a region.
• A key pair can bind multiple instances, but the same instance can bind one key pair only. If your instance binds the key pair, binding a new key pair replaces the original one.
• Download the private key immediately after the key pair is generated successfully. Baidu AI Cloud does not reserve the your private key information, and you have only one chance to download the private key.
• The CVM server can be batch bound in the start-up or shutdown status. The binding takes effect when virtual machine automatically restarts after binding at start-up. The binding takes effect when you start the virtual machine after binding at shutdown.
• When you reinstall the system, you need to reset the SSH key pair.
• The snapshot rollback does not affect the use of current key, i.e., you need to log in to the system with the key before the snapshot rollback. Furthermore, you can also rebind the key pair.

Create a SSH Key Pair

1. Log in to the Management Console to enter the "Product Service >DCC".
2. Click Key Pair in the left navigation bar to enter the "Key Pair List" page.

3. Select the required region on the "Key Pair List" page, and then click Create Key Pair.

   

4. Select the key pair creation method, set the key pair name and fill in the key pair description information on the Create Key Pair page.

   • If you select "Create Key Pair" as the creation method, enter the key pair name and the key pair description information, and then click "Confirm".
   • If you select the "Use Existing Public Key" as the creation method, enter the key pair name, key pair description information and original public key information, and then click "Confirm".

   Notice: The Baidu AI Cloud platform does not reserve your private key information. Click "OK", and the system automatically downloads the private key locally. Special note: If you cancel the download, you can not obtain the private key.

5. After the successful creation of key pair, you can see the created key pair information in the key pair list, including key pair name, status and number of bound virtual machines.

Bind/Unbind a SSH Key Pair

Bind a SSH Key Pair

Operation Steps:

1. Log in to the Management Console to enter the "Product Service >DCC".
2. Click Key Pair in the left navigation bar to enter the "Key Pair List" page.
3. Select the region where the SSH key pair needs to be bound.

4. Locate the key pair to operate in the key pair list, and then click Bind Virtual Machine in the action row.

   

5. Select the the BCC instance name to bind the key pair in the "Bind Virtual Machine" dialog, and then click "Confirm". Enter the short message verification code in the "Security Authentication" pop-up window to bind the key pair successfully.

Subsequent Operation

For the information on how to log in to the Linux instance with the SSH key pair, see Log in to Linux Instance with SSH Key.

Unbind a SSH Key Pair

1. Log in to the Management Console to enter the "Product Service >DCC".
2. Click Key Pair in the left navigation bar to enter the "Key Pair List" page.
3. Select the region where the SSH key pair needs to be unbound.

4. Locate the key pair to operate in the key pair list, and then click Unbind Virtual Machine in the Action row.

   

5. Select the the BCC instance name to bind the key pair in the Bind Virtual Machine dialog, and then click Confirm. Enter the short message verification code in theSecurity Authentication pop-up window to bind the key pair successfully.

Delete a SSH Key Pair

1. Log in to the Management Console to enter the "Product Service >DCC".
2. Click Key Pair in the left navigation bar to enter the "Key Pair List" page.
3. Select one or more key pairs to delete, and then click Delete to delete the SSH key pair successfully.

Notice: The SSH key pair bound to the virtual machine must be unbound before deletion.