> For the complete documentation index, see [llms.txt](https://docs.acecloud.ai/knowledge-base/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.acecloud.ai/knowledge-base/registry/working-with-source-registries-in-ace-container-registry.md).

# Working with Source Registries in Ace Container Registry

The **Source Registry** tab in AceCloud allows you to connect your registry with external registries such as Docker Hub, AWS Elastic Container Registry (ECR), and Azure Container Registry (ACR). This enables seamless image pulling and replication from external sources.

## **Accessing the Source Registry Tab**

1. Log in to the **AceCloud Console**.
2. Select your **Project** and **Region**.
3. Navigate to **Container Registry**.
4. Select the **Source Registry** tab.

<figure><img src="/files/NTDlfwwKxa1ZJvpQzqhY" alt=""><figcaption></figcaption></figure>

## **Creating a Source Registry**

### **1. Click on Create Registry**

* Found at the top-right of the **Source Registry** tab.

<figure><img src="/files/zRQSytemnyjRoiYZHGdA" alt=""><figcaption></figcaption></figure>

### **2. Select Registry Type**

* **Docker Hub**
* **AWS ECR**
* **Azure ACR**
* **Google GCR**
* **Harbor**
* **Quay.io**

### **3. Fill in Registry Details**

* **Name**: Unique name for the source registry.
* **Description**: Optional description for identification.
* **Endpoint URL**: The URL endpoint for the registry.
* **Access ID**: Authentication username or ID.
* **Access Secret**: Authentication password or secret.
* **Verify Remote Certificate**: Select Yes to enable SSL certificate verification for secure connections.

<figure><img src="/files/vbc14Hj05biLm2W00N9c" alt=""><figcaption></figcaption></figure>

### **4. Save the Source Registry**

* Review the details and click **Submit.**

## **Security Recommendations**

* Store credentials securely.
* Avoid using accounts with unnecessary permissions.
* Enable **Verify Remote Certificate** unless connecting to a trusted self-signed registry.
