Creating an encrypted image is divided into creating an encrypted image through an external image file and an encrypted elastic cloud server. When creating an encrypted image through an external image file, the user uses the external image file in the 0BS bucket to create a private image, and selects KMS encryption and key to complete image encryption when registering the image. When creating an encrypted image through an encrypted ECS, when the user selects an ECS to create a private image, if the system disk of the ECS is encrypted, the corresponding private image is also encrypted. The key used to encrypt the image is consistent with the key of the system disk.