Transfer an ECS server

Updated at:

You may need to transfer an Elastic Compute Service (ECS) instance to another Alibaba Cloud account due to changes in your corporate structure, business ownership, or migration plans. ECS resource transfer is the process of transferring the ownership of a purchased ECS instance and its related resources from one Alibaba Cloud account to another. This feature enables seamless transfer of ECS instance resources between different Alibaba Cloud accounts, ensuring business continuity and management flexibility.

Scope of transferable resources

ECS resource transfer currently supports subscription and pay-as-you-go ECS instances. Spot ECS instances cannot be transferred.

  • The resource transfer only changes the ownership information of the ECS instance.

  • The region, zone, specifications, disks (system disk and data disks), and static public IP address configuration of the ECS instance remain unchanged.

  • Snapshots and custom image resources of the ECS instance are not transferred.

The following figure shows the process of transferring an ECS instance from Account A to Account B.

image

Costs and time

  • The transfer takes about half an hour.

  • Resource transfers are free of charge. After a successful transfer, the destination account pays for all subsequent ECS instance fees.

Effects of transfer

Before the transfer, you must stop the running ECS server. The ECS instance will be in the stopped state during the transfer process. Services associated with the instance in the source account, such as ApsaraDB RDS (RDS), Object Storage Service (OSS), and Server Load Balancer (SLB), will be affected. Prepare for business changes in advance. Points to consider include, but are not limited to, the following:

  • Network connectivity: When an ECS instance is transferred, its Virtual Private Cloud (VPC) is changed. This affects its network location and connectivity. The instance cannot directly communicate with other ECS instances in the original VPC. To enable private connectivity between VPCs across accounts, see Use a VPC peering connection to enable private connectivity between VPCs.

  • Private IP address: The private IP address of the ECS instance may change after the transfer. If other services or applications use the private IP address, you must update the configuration to the new private IP address. You can also plan a VPC with the same CIDR block in the destination account. After the transfer, change the private IP address back to the original one to keep it unchanged.

    Note

    The static public IP address of the instance remains unchanged.

  • Security group: After the transfer, the inbound and outbound access rules of the destination security group apply to the ECS instance. Changes in access rules may affect normal business access. If the destination security group does not have the required rules, you can export the rules from the security group associated with the original ECS instance and import them into the destination security group. This quickly adds the necessary security group rules. For more information, see Import and export security group rules.

Conditions

Account requirements

  • Only Alibaba Cloud accounts that have completed identity verification can perform transfer operations. RAM users are not supported.

  • The accounts cannot have overdue payments. If the source or destination account has overdue payments, they must be cleared first.

  • The following table describes the supported transfer scenarios between individual and enterprise accounts.

    Source account

    Destination account

    Support status

    Individual account

    Individual account

    • Same identity verification: Resource transfer is supported.

    • Different identity verification or destination account has not completed identity verification: You can only transfer the ECS instance to one individual account. Further transfers to other individual accounts are not supported.

    • Further transfers to other individual accounts: Not supported.

      Consider using shared images or Server Migration Center (SMC). For more information, see Other migration solutions.

    Enterprise account

    Enterprise account

    • Same identity verification: Resource transfer is supported. The enterprise entities and names must be identical. An enterprise entity can verify up to 10 Alibaba Cloud accounts.

    • Other scenarios: Resource transfer is not supported.

      Consider using shared images or SMC. For more information, see Other migration solutions.

    Individual account

    Enterprise account

    • You can only transfer resources to one enterprise account. Further transfers to other enterprise accounts are not supported.

    • Further transfers to other enterprise accounts: Not supported.

      Consider using shared images or SMC. For more information, see Other migration solutions.

    Enterprise account

    Individual account

    Not supported

    Consider using shared images or SMC. For more information, see Other migration solutions.

  • Transfers are not supported if the source or destination account is a managed account.

    Note

    For accounts in a finance trusteeship relationship, ownership transfer is supported for the trustor account (Alibaba Cloud account) but not for the trustee account (RAM user).

  • Transfers are also not supported for source and destination accounts in the following situations:

    • The source or destination account is a reseller customer, virtual operator customer, or other non-direct customer of the official website.

    • The source and destination accounts are on different sites, such as the Alibaba Cloud China Website (www.aliyun.com) and the Alibaba Cloud International Website (www.alibabacloud.com).

    • The source and destination accounts are the same.

    • The source or destination account has no available balance (including cash balance, credit limit, etc.), or the destination account's available balance is less than CNY 100.

    • The source or destination account has special privileges, such as exemption from payment reminders and service suspension.

    • The source or destination account is in the process of being unregistered or is frozen.

Instance requirements

  • An ECS instance can be transferred only once every six months, based on the date of the last successful transfer.

  • Instances purchased during certain marketing campaigns cannot be transferred. This includes ECS instances purchased by the same user (a user is identified by associated information during registration, logon, and use, such as the same certificate, phone number, payment account, device, or address). For other cases, see the specific campaign rules.

  • You cannot change the region and zone of the instance during the transfer process.

  • Spot instances cannot be transferred.

  • Instances cannot be transferred within five days of creation.

  • Subscription instances cannot be transferred within 72 hours of their expiration date.

  • Instances purchased using restricted payment methods, such as installment plans, cannot be transferred until the payments are complete.

  • Instances with scheduled configuration changes, such as a downgrade upon renewal or a temporary bandwidth upgrade, cannot be transferred.

  • Instances with an active temporary upgrade cannot be transferred.

  • Instances in an abnormal state, such as expired or locked, cannot be transferred.

  • Instances that are currently attaching or detaching a disk cannot be transferred.

  • Instances with an encrypted disk attached cannot be transferred. For more information, see Encryption overview.

  • Instances running on a Dedicated Host (DDH) cannot be transferred. For more information, see What is a Dedicated Host (DDH)?.

  • Instances that use an image from the Marketplace cannot be transferred. For more information, see Marketplace.

  • Instances bound to a high-availability virtual IP address (HaVip) cannot be transferred. For more information, see High-availability virtual IP (HaVip).

  • Instances subscribed to the reverse access service cannot be transferred. For more information, see SetVpcAccess - Create a VPC authorization to enable reverse access.

  • Instances with a specified next hop routing rule cannot be transferred. For more information, see Custom route.

  • Instances bound to an SLB service cannot be transferred. For more information, see What is Server Load Balancer?.

  • Instances bound to a Global Accelerator (GA) service cannot be transferred. For more information, see What is Global Accelerator?.

  • Instances with unpaid orders cannot be transferred. Cancel the orders before you can transfer the instance.

  • Instances with a scheduled physical server migration and upgrade task cannot be transferred. Wait for the task to complete before you can transfer the instance.

  • Instances bound to a key pair cannot be transferred. You must detach the key pair before the transfer. For more information, see Detach a key pair.

  • Instances with an ESSD AutoPL disk that has the performance burst feature (ioburst service) enabled cannot be transferred. To transfer the instance, you can:

  • VPC-type ECS instances must be stopped before the transfer. Plan for the downtime in advance. Associated services such as RDS, OSS, and SLB will be affected. The source and destination accounts must prepare for business changes.

  • VPC-type ECS instances cannot be transferred with an elastic IP address (EIP) attached. Before the transfer, detach the EIP. For more information, see Disassociate an EIP from a cloud resource.

    Note

    Pay-as-you-go EIPs can be transferred separately. If your ECS instance is bound to a pay-as-you-go EIP, see Transfer a pay-as-you-go EIP to transfer the EIP separately.

  • VPC-type ECS instances cannot be transferred with a secondary ENI attached. You must detach the secondary ENI before the transfer. For more information, see Detach an ENI.

  • The ECS instance hosts other Alibaba Cloud services, such as Data Transmission Service (DTS). You must revoke the service authorization before you can transfer the instance.

  • If you request a refund for a transferred instance, the refund amount will be CNY 0. If the instance has new orders, refunds are processed according to the rules of the new orders.

  • Other scenarios where transfers are not supported:

    • The number of instances to be transferred exceeds the instance quota of the destination security group.

    • The network type of the destination security group is inconsistent with that of the instance to be transferred.

Procedure

The following figure shows the ECS instance transfer process.

image

Preparations

Prepare the following information to fill in during the transfer operation:

  • Destination account UID

    The Alibaba Cloud account UID, which is a string of digits, for example, 1404423********.

  • Destination account name

    The name of the Alibaba Cloud account.

  • ID of the instance to be transferred

    For example, i-bp***********o6rvr.

  • Destination VPC, vSwitch, and security group

    Prepare a destination VPC, vSwitch, and security group for the ECS instance after the transfer. If the destination security group does not have the required rules, you can export the rules from the security group associated with the original ECS instance and import them into the destination security group. This quickly adds the necessary security group rules. For more information, see Import and export security group rules.

    • Destination account security group ID

      For example, sg-bp1e***********b62q. This is provided by the destination account. The destination security group and vSwitch must be in the same VPC. For example, if the source ECS instance is in Zone H of the China (Hangzhou) region, the destination account must provide a security group ID from Zone H of the China (Hangzhou) region.

    • Destination account vSwitch ID

      For example, vsw-bp1************soivp5. This is provided by the destination account. The destination vSwitch and the instance to be transferred must be in the same zone. For example, if the source ECS instance is in Zone H of the China (Hangzhou) region, the destination account must provide a vSwitch ID from Zone H of the China (Hangzhou) region.

Transfer operations

Important

Before you transfer an ECS instance, make sure you have carefully read the [Alibaba Cloud ECS Instance Self-service Transfer Risk Disclosure] to understand the precautions and risks associated with the transfer.

Step 1: The source account initiates the transfer

The source account initiates a transfer request. Follow these steps:

  1. Log on to the Expenses and Costs console with the source account and select Resource Transfer.

  2. On the Transferable Resources tab, find the ECS instance to transfer and click Actions in the Actions column.

  3. On the Transfer page, carefully enter the Destination Account UID and Destination Account Name. Select I agree to the "Transfer Agreement". The transfer may involve certain risks. Please read the transfer agreement carefully., and then click OK.

  4. Complete the verification in the risk control and identity verification window that appears. After the verification is passed, the transfer confirmation is complete and the transfer process begins. Wait for the transfer to complete.

  5. On the Resource Transfers I Initiated tab, a new transfer request appears with the status Pending Confirmation. This indicates that the transfer was successfully initiated.

    Important
    • If the destination account does not confirm within 24 hours, the transfer request expires. You must initiate a new transfer request.

    • Before the destination account confirms the transfer, you can Cancel Transfer at any time as needed.

Step 2: The destination account confirms the transfer

Contact the destination account holder to confirm the transfer. Follow these steps:

  1. Log on to the Expenses and Costs console with the destination account and select Resource Transfer.

  2. On the Resource Transfer page, click the Resource Transfers I Confirm tab.

  3. Find the pending resource and click Actions in the View Details column. Confirm the information of the ECS instance to be received, and then click Confirm to Receive Transfer.

  4. On the Configuration for Receiving Resource Transfer page, confirm the resource information. Select the Destination account security group ID and Destination account vSwitch ID. Select I agree to the "Transfer Agreement". The transfer may involve certain risks. Please read the transfer agreement carefully., and then click Confirm Receipt.

    Note
    • The Destination account security group ID and Destination account vSwitch ID are provided by the destination account. The destination security group and vSwitch must be in the same VPC and the same zone as the transferred instance. For information about how to create a security group and a vSwitch, see Create a security group and Create a VPC.

    • If you do not want the private IP address to change, select a vSwitch with the same CIDR block. After the transfer is complete, change the private IP address back to the original one. For more information, see Modify a private IPv4 address.

  5. On the Resource Transfers I Confirm tab, a new transfer record appears with the status Transfer Completed.

  6. Start the ECS instance.

    Log on to the ECS console. On the Instance page, select the region where the instance is located. In the Actions column, click Start. After the operation is complete, the instance enters the Running state.

Step 3: The source account confirms the transfer is complete

After the destination account accepts the ECS instance, the source account must confirm the operation.

  1. Log on to the Expenses and Costs console with the source account and select Resource Transfer.

  2. On the Resource Transfer page, click the Resource Transfers I Initiated tab and check the transfer status.

    When the status is Transfer Completed, the entire transfer process is finished. The destination account can now use the ECS instance.

Post-transfer confirmation

After the transfer, you will notice the following changes:

  • The instance is removed from the console of the source account.

  • The instance is removed from the security group of the source account and added to the security group of the destination account.

  • A refund order of CNY 0 is generated for the source account, and a new purchase order of CNY 0 is generated for the destination account.

  • For subscription instances, the original expiration date remains unchanged after the transfer.

  • The system disk and data disks created with the instance are transferred to the destination account.

  • Disks manually attached to the instance are transferred to the destination account.

  • The static public IP address assigned to the instance is transferred to the destination account.

  • The private IP address changes. It is reallocated by the destination vSwitch based on its CIDR block.

    If you do not want the private IP address to change, you can manually modify it after the transfer is complete. For more information, see Modify a private IPv4 address.

FAQ

  1. Why did I find that the transfer order had expired when I tried to confirm it?

    A: The destination account must process the transfer order within 24 hours of receiving it. Otherwise, the order expires.

  2. What are the service limitations for instance transfers?

    The following table describes some service limitations during an instance transfer.

    Ownership transfer workflow

    Description

    Before transfer

    Preparations before the transfer:

    Many rule checks are performed throughout the transfer process, with checks at each step. If your instance does not meet the rules, a prompt appears during the process.

    During transfer

    While the instance is being transferred, the following rules apply to transaction-related operations:

    • Not allowed: Upgrading or downgrading, manual renewal, unregistering, unsubscribing, changing the operating system, upgrading or downgrading bandwidth, and converting between subscription and pay-as-you-go.

    • Allowed: Auto-renewal. The fee is deducted from the account that owns the resource instance at the time of execution.

    After transfer

    Instructions for unsubscribing and downgrading after the transfer:

    • The refund amount for unsubscribing from or downgrading the original configuration is CNY 0.

    • If you unsubscribe after a renewal, only the remaining value of the renewal portion is refunded.

    • If you downgrade after an upgrade, only the remaining value of the upgrade portion is refunded.

  3. What do I do if the Destination account vSwitch ID dropdown is empty when the destination account confirms the transfer?

    A: The vSwitch must be in the same zone as the ECS instance being transferred. If the Destination account vSwitch ID dropdown is empty in the destination account, it means no vSwitch has been created in that zone under the destination account. Create a vSwitch in the same zone as the ECS instance under the destination account, and then go back to the transfer confirmation page to reselect the vSwitch. You do not need to reject the transfer and reinitiate it.

Other migration solutions

When the ECS resource transfer solution cannot meet your migration goals, you can consider the following indirect migration methods: sharing an image or using SMC.

Solution 1: Share a custom image

If you cannot use the ECS resource transfer solution because the two enterprise accounts belong to different entities, you can use the custom image sharing solution.

The basic idea is to create a custom image from the source server, share it with the destination account, and then use the shared image to create a new ECS instance in the destination account. The steps are as follows:

  1. In the source account, create a custom image from an instance.

  2. Share the custom image with the destination account.

  3. In the destination account, create an ECS instance from a shared image.

Solution 2: Use Server Migration Center (SMC)

Use Alibaba Cloud SMC to migrate an ECS instance to another ECS instance. For more information, see Migrate an ECS instance to an ECS instance in the same or a different account.