Alibaba Cloud's Cloud Hardware Security Module (HSM) uses a USB Key (UKey), authorized by the National Cryptography Administration, for authentication and secure storage of sensitive data. For production environments, we recommend using a UKey to log on to the HSM. This topic describes how to get the UKey after purchasing an HSM.
UKey quota
You can get a maximum of 10 UKeys per HSM.
How to get UKeys
Submit your UKey request.
Contact Alibaba Cloud technical support to request a UKey. Your request must include:
Alibaba Cloud Account ID
HSM instance ID
Recipient's full name
Contact phone number
Full mailing address
Delivery and support.
Alibaba Cloud will ship your UKey following approval. Expect delivery within 2-7 business days. If you don't receive it within 10 business days, contact Alibaba Cloud technical support.
Securing your UKey after receipt
Secure storage
The UKey is a critical access credential for the encryption device, requiring stringent security and confidentiality measures. Ensure it is stored securely to prevent loss, theft, or damage.
Change the default password promptly
The default password for the UKey is typically a basic security token. We recommend that you change it as soon as you receive the UKey. Instructions for changing the password and additional usage guidelines are available in the user manual, which can be downloaded from the console along with the HSM software package.
