If you encounter any problems when using certificates in WAF, ELB, and CDN, submit a service ticket to the involved service for consultation.

SCM supports one-click push of issued certificates to the WAF, ELB, or CDN service. After the push, you need to configure information in the corresponding service.

If you have any questions during the push or configuration process, refer to the WAF, ELB, or CDN documentation or submit a service ticket to the involved service for help.

If the problem persists, submit a service ticket to WAF, ELB, or CDN for help.

Follow-up Procedure

Push the certificate to WAF, ELB, and CDN with just a few clicks. For details, see Pushing an SSL Certificate to Other Cloud Services.

After the push, you need to complete required configuration in the corresponding service.

If you have any questions during the configuration, refer to the corresponding service documentation or contact the service personnel.

• ELB: If HTTPS data transmission encryption is required, you need to associate a certificate when creating an HTTPS listener. If you choose to push the certificate to ELB in one click, you can select the pushed certificate in ELB. Otherwise, you need to manually upload the certificate. For details about how to set ELB parameters, see Creating a Certificate.

  Generally, only server certificates need to be configured to authenticate servers for HTTPS-based business. For some key businesses, such as bank payment, two-way authentication is required for enhanced business security. For details about how to deploy certificates for two-way authentication, see Mutual Authentication.

• CDN: To implement HTTPS security acceleration, you need to configure an HTTPS certificate for the acceleration domain name and deploy the certificate on CDN nodes on the entire network. If you choose to push the certificate to CDN in one click, you can select the pushed certificate in CDN. Otherwise, you need to manually upload the certificate. For details about how to set CDN parameters, see HTTPS Certificate Requirements.
• WAF: You need to configure a certificate when adding a domain to WAF if HTTPS is used for communications between the client and WAF. If you choose to push the certificate to WAF in one click, you can select the pushed certificate in WAF. Otherwise, you need to manually upload the certificate. For details, see Adding a Domain Name.

  If a certificate has been configured in WAF, you only need to update the certificate. For details, see Updating a Certificate.