Can Multiple SSL Certificates Be Configured on a Server?

Yes. You can configure multiple certificates on a server.

Can an SSL Certificate Be Deployed on Multiple Servers?

Certificates are bound to domain names or IP addresses, and there is no limit on the number of servers. If the domain name bound to the purchased certificate is used on multiple servers, the purchased certificate takes effect only after being deployed on each server.

Must an SSL Certificate Be Installed on a HUAWEI CLOUD Server?

No.

An SSL certificate you bought on SCM can be used for your server on HUAWEI CLOUD or other platforms.

You can download and use the certificate repeatedly within its validity period. Upon downloading, you can install and deploy the certificate on your server on any platforms.

Can I Use an SSL Certificate on a Cloud Host or Website in Hong Kong (China)?

Yes.

The use of an SSL certificate is not restricted by geographical locations.

Why Cannot I Find the Newly Issued or Uploaded SSL Certificates in Cloud Services Such as WAF, ELB, and CDN?

After an SSL certificate is issued or uploaded, it can be used in other HUAWEI CLOUD services, such as WAF, ELB, and CDN.

Currently, you can push certificates to WAF, ELB, and CDN on HUAWEI CLOUD by one click and complete required configuration in the specific service for the certificate to take effect. If a certificate needs to be pushed to another HUAWEI CLOUD service, you need to download the certificate, upload the certificate to the corresponding service console, and deploy the certificate.

Applying Certificates in WAF, ELB, and CDN

SCM supports the push of certificates to WAF, ELB, and CDN. After the push, the certificates can be configured in the corresponding HUAWEI CLOUD services. After the configuration succeeds, data access through the HUAWEI CLOUD services is more secure.

You need to use SCM to push a certificate to the corresponding HUAWEI CLOUD service, and then configure the certificate in the corresponding HUAWEI CLOUD service to enable the HTTPS service. Perform the following steps to complete the check.

1. Use SCM to push a certificate to other HUAWEI CLOUD services.

   For details, see Pushing an SSL Certificate to Other Cloud Services.

2. Configure the certificate in the corresponding HUAWEI CLOUD service.
   • ELB: If HTTPS data transmission encryption is required, you need to associate a certificate when creating an HTTPS listener. If you choose to push the certificate to ELB in one click, you can select the pushed certificate in ELB. Otherwise, you need to manually upload the certificate. For details about how to set ELB parameters, see Creating a Certificate.

     Generally, only server certificates need to be configured to authenticate servers for HTTPS-based business. For some key businesses, such as bank payment, two-way authentication is required for enhanced business security. For details about how to deploy certificates for two-way authentication, see Mutual Authentication.

   • CDN: To implement HTTPS security acceleration, you need to configure an HTTPS certificate for the acceleration domain name and deploy the certificate on CDN nodes on the entire network. If you choose to push the certificate to CDN in one click, you can select the pushed certificate in CDN. Otherwise, you need to manually upload the certificate. For details about how to set CDN parameters, see HTTPS Certificate Requirements.
   • WAF: You need to configure a certificate when adding a domain to WAF if HTTPS is used for communications between the client and WAF. If you choose to push the certificate to WAF in one click, you can select the pushed certificate in WAF. Otherwise, you need to manually upload the certificate. For details, see Adding a Domain Name.

     If a certificate has been configured in WAF, you only need to update the certificate. For details, see Updating a Certificate.

   If you have any questions during the configuration, refer to the corresponding service documentation or consult the corresponding service personnel.

How Do I Export the Certificate Key to WAF After I Purchase an SSL Certificate and WAF on HUAWEI CLOUD?

When configuring WAF, you need to use the key in the SSL certificate. For more details, see Configuring WAF Certificates.

If you have any questions during the configuration, refer to the corresponding service documentation or consult the corresponding service personnel.