Alibaba Cloud HSM uses a UKey (USB key) approved by the China National Cryptography Administration for authentication and secure storage of sensitive data. We recommend using a UKey to log on to your HSM in a production environment. This topic describes how to obtain a UKey after you purchase an HSM.
UKey quota
You can obtain up to 10 UKeys for each HSM.
How to obtain a UKey
-
Contact Alibaba Cloud technical support to request a UKey.
Include the following information in your request: Alibaba Cloud account ID, HSM instance ID, recipient's full name, contact phone number, and mailing address.
-
After your request is approved, Alibaba Cloud ships the UKey to you.
Delivery typically takes 2 to 7 business days. If you do not receive the UKey within 10 business days, contact Alibaba Cloud technical support.
Usage notes
-
Store the UKey securely
The UKey is a critical credential for accessing and operating your HSM. Store it in a secure location upon receipt to prevent loss, theft, or damage.
-
Change the default password promptly
The UKey is shipped with a weak default password. Change it immediately upon receipt. You can find the default password and usage instructions in the user manual, which is included in the software package. To download the software package, go to the Instances page in the HSM console, find the target instance, and then click the download icon next to general-purpose HSM in the Specifications column.