Help Center> Cloud Certificate & Manager> FAQs> SSL Certificate Download, Installation, and Use> SSL Certificate Use> How Do I Configure a Non-HUAWEI CLOUD SSL Certificate for a HUAWEI CLOUD Service?
View PDF

How Do I Configure a Non-HUAWEI CLOUD SSL Certificate for a HUAWEI CLOUD Service?

A non-HUAWEI CLOUD certificate refers to an SSL certificate that is applied for from non-HUAWEI CLOUD and is issued by a CA, for example, an SSL certificate that is applied for from another cloud service provider or an offline certificate provider and issued by a CA.

All SSL certificates are issued by the CA, regardless of platforms on which SSL certificates are applied for.

Any SSL certificates you requested from any platforms can be used in HUAWEI CLOUD after the certificate is issued by a trusted CA. However, the one-click push function cannot be used to push these certificates to HUAWEI CLOUD services, such as WAF, ELB, and CDN. Therefore, you are advised to use an SSL certificate applied for on HUAWEI CLOUD so that you can push the certificate to the corresponding HUAWEI CLOUD service in one-click mode. After the certificate is pushed, you can directly select the pushed certificate from the corresponding HUAWEI CLOUD service, and you do not need to import the certificate separately. For example, after a certificate is issued, you can push the certificate to WAF with just one click. When you add a domain name to WAF, you can directly select the pushed certificate.

To configure a non-HUAWEI CLOUD SSL certificate for a HUAWEI CLOUD service, perform the following operations as required:

Table 1 Scenario description

Scenario

Procedure

Managing all you certificates on HUAWEI CLOUD SCM

Upload SSL certificates to SCM. For details, see Uploading an External Certificate.

Using certificates in WAF, ELB, and CDN

If you have any problem during the configuration, see the corresponding service documentation to solve the problem.

  • ELB: If HTTPS data transmission encryption is required, you need to associate a certificate when creating an HTTPS listener. If you choose to push the certificate to ELB in one click, you can select the pushed certificate in ELB. Otherwise, you need to manually upload the certificate. For details about how to set ELB parameters, see Creating a Certificate.

    Generally, only server certificates need to be configured to authenticate servers for HTTPS-based business. For some key businesses, such as bank payment, two-way authentication is required for enhanced business security. For details about how to deploy certificates for two-way authentication, see Mutual Authentication.

  • CDN: To implement HTTPS security acceleration, you need to configure an HTTPS certificate for the acceleration domain name and deploy the certificate on CDN nodes on the entire network. If you choose to push the certificate to CDN in one click, you can select the pushed certificate in CDN. Otherwise, you need to manually upload the certificate. For details about how to set CDN parameters, see HTTPS Certificate Requirements.
  • WAF: You need to configure a certificate when adding a domain to WAF if HTTPS is used for communications between the client and WAF. If you choose to push the certificate to WAF in one click, you can select the pushed certificate in WAF. Otherwise, you need to manually upload the certificate. For details, see Adding a Domain Name.

    If a certificate has been configured in WAF, you only need to update the certificate. For details, see Updating a Certificate.

Using a certificate in other HUAWEI CLOUD products

Download the certificate, upload the certificate to the corresponding service console, and deploy the certificate.

If you have any questions during the configuration, refer to the corresponding service documentation or contact the corresponding service personnel.

If you need to install an SSL certificate on a server, configure the certificate based on the server type. For details, see How Do I Install an SSL Certificate on a Server?

Parent topic: SSL Certificate Use