forked from docs/doc-exports
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com> Co-authored-by: zhangyue <zhangyue164@huawei.com> Co-committed-by: zhangyue <zhangyue164@huawei.com>
19 lines
3.3 KiB
HTML
19 lines
3.3 KiB
HTML
<a name="obs_03_0088"></a><a name="obs_03_0088"></a>
|
|
|
|
<h1 class="topictitle1">Bucket Default Encryption</h1>
|
|
<div id="body1551323631371"><p id="obs_03_0088__p725032142814">OBS allows you to configure default encryption for a bucket. After the default encryption is enabled for the bucket, objects uploaded to this bucket are automatically encrypted using the specified KMS key, making data storage more secure.</p>
|
|
<p id="obs_03_0088__p855995918245">You can enable default encryption when creating a bucket (see <a href="en-us_topic_0045853662.html">Creating a Bucket</a>), or enable or disable default encryption after the bucket is created.</p>
|
|
<p id="obs_03_0088__p4926171015014">OBS only encrypts the objects uploaded after the default encryption is enabled for the bucket, and does not encrypt those uploaded before. After you disable a bucket's default encryption, the encryption status of existing objects keeps unchanged, and you can separately encrypt objects when uploading them to the bucket.</p>
|
|
<div class="section" id="obs_03_0088__section3892114117330"><h4 class="sectiontitle">Enabling Default Encryption for a Bucket</h4><ol id="obs_03_0088__ol93829311363"><li id="obs_03_0088__li99821455306"><span>In the bucket list, click the bucket you want to operate. The <strong id="obs_03_0088__obs_03_0307_b144421021120">Overview</strong> page is displayed.</span></li><li id="obs_03_0088__li18830181855820"><span>In the <strong id="obs_03_0088__b26567116474">Basic Configurations</strong> area, click <strong id="obs_03_0088__b188978911477">Default Encryption</strong>. The <strong id="obs_03_0088__b87694251478">Default Encryption</strong> dialog box is displayed.</span></li><li id="obs_03_0088__li185861427134716"><span>Select <strong id="obs_03_0088__b158241243144713">Enable</strong>.</span><p><p id="obs_03_0088__p181834121475">Key <strong id="obs_03_0088__b1351149191">obs/default</strong> is selected by default for KMS encryption. You can also click <strong id="obs_03_0088__b7713643173111">Create KMS Key</strong> to switch to the KMS management console and create a customer master key. Then go back to OBS Console and select the key from the drop-down list.</p>
|
|
</p></li><li id="obs_03_0088__li950544814498"><span>Click <strong id="obs_03_0088__b74262294910">OK</strong>.</span></li></ol>
|
|
</div>
|
|
<div class="section" id="obs_03_0088__section1434134116310"><h4 class="sectiontitle">Disabling Default Encryption for a Bucket</h4><ol id="obs_03_0088__ol03353441319"><li id="obs_03_0088__li1933611448318"><span>In the bucket list, click the bucket you want to operate. The <strong id="obs_03_0088__obs_03_0307_b144421021120_1">Overview</strong> page is displayed.</span></li><li id="obs_03_0088__li11336244153118"><span>In the <strong id="obs_03_0088__b19974152855418">Basic Configurations</strong> area, click <strong id="obs_03_0088__b199741028165410">Default Encryption</strong>. The <strong id="obs_03_0088__b11974152810546">Default Encryption</strong> dialog box is displayed.</span></li><li id="obs_03_0088__li18336114433120"><span>Select <strong id="obs_03_0088__b209746253569">Disable</strong>.</span></li><li id="obs_03_0088__li93366443315"><span>Click <strong id="obs_03_0088__b1142552019">OK</strong>.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0321.html">Server-Side Encryption</a></div>
|
|
</div>
|
|
</div>
|
|
|