Help Center> Cloud Certificate & Manager> Best Practices> Pushing Certificates to WAF> Adding a Domain Name to be Protected or Updating a Certificate
View PDF

Adding a Domain Name to be Protected or Updating a Certificate

After the certificate is successfully pushed, you need to select HTTPS in WAF and select the pushed certificate.

This section describes how to add a domain name or update a certificate in WAF.

Guide descriptions:

  • Adding a Domain Name: If your domain name has not been added to WAF, perform the operations in this topic. For details, see Adding a Domain Name.
  • Updating a Certificate: If your domain names have been added to WAF (the added domain names correspond to the domain names associated with the certificate) and Client Protocol is set to HTTPS, you can replace the certificate with the pushed certificate based on the instructions in this topic.

Adding a Domain Name

If you have not added your domain name to WAF, perform the operations in this topic.

Prerequisites

  • You have obtained an account and its password for logging in to the management console.
  • The certificate has been pushed.
  • You have purchased WAF. If you have not purchased WAF, purchase it based on the instructions in Buying WAF.

Procedure

  1. (Optional) Log in to the management console.
  2. Go to the Website Settings page by following the steps shown in Figure 1.

    Figure 1 Access to the Website Settings page

  3. In the navigation pane, choose Website Settings.
  4. In the upper left corner of the website list, click Add Website.
  5. Select Cloud mode and configure basic domain name information. Figure 2 shows an example.

    Figure 2 Configuring basic settings
    • Domain Name: Enter the domain name associated with the certificate.
    • Port: Set this parameter only if Non-standard Port is selected.

      If Client Protocol is set to HTTPS, WAF protects services of the standard port 443 by default.

      To configure a port other than port 443, select Non-standard Port and select a non-standard port from the Port drop-down list.

    • Server Configuration: configuration of a web server address. The configuration contains the client protocol, server protocol, server address, and server port.

      Set Client Protocol to HTTPS.

    • Certificate Name: Click and select a pushed certificate.
    • Proxy Configured: A website that accessed WAF has used proxies, such as CDN and cloud acceleration.

      The default value is No.

    • Configure Policy: System-generated policy is selected by default.

    For details, see Adding a Domain Name.

  6. Click Next.

    You are advised to click Next and then click Finish to skip this step. You can connect the domain name to WAF later by referring to Testing WAF and Connecting a Domain Name to WAF

  7. Click Next and then Finish.

Updating a Certificate

If your domain names have been added to WAF (the added domain names correspond to the domain names associated with the certificate) and Client Protocol is set to HTTPS, you can replace the certificate with the pushed certificate based on the instructions in this topic.

Prerequisites

  • You have obtained an account and its password for logging in to the management console.
  • The certificate has been pushed.
  • You have purchased WAF. If you have not purchased WAF, purchase it based on the instructions in Buying WAF.
  • The protected domain names have been added to WAF, and the protected domain names correspond to the certificate domain names.
  • Client Protocol is set to HTTPS.

Procedure

  1. (Optional) Log in to the management console.
  2. Go to the Website Settings page by following the steps shown in Figure 3.

    Figure 3 Access to the Website Settings page

  3. In the Protected Website column, click the domain name of the website to go to the basic information page.
  4. Click next to the target certificate name. In the displayed dialog box, select the pushed certificate.
  5. Click OK. Your certificate is updated.