Pushing an SSL Certificate to Other Cloud Services

Prerequisites

The certificate is in the Issued or Hosted state.

Constraints

• If you choose to manually generate a CSR when applying for a certificate, the issued certificate cannot be pushed to other cloud services.
• If you have not purchased a given cloud service or the service is not available for the domain name associated with your certificate, do not push the certificate to it because the process may fail.
• A certificate can only be pushed to a product once in SCM. If you push a certificate that has been pushed or uploaded to a cloud product, a push failure will occur.

Procedure

1. Log in to the management console.
2. In the Operation column of the certificate you want to push, click More > Push to go to the certificate push details page.
3. Select the cloud service you wish to push the certificate to.
   Figure 1 Selecting a cloud service

4. (Optional) Perform this step if a certificate is to be pushed to WAF or ELB.

   Click on the right of the destination project and select the destination region.

5. Click Push Certificate at the lower right corner of the page.

   If a message indicating that the certificate is successfully pushed is displayed, the SSL certificate is successfully pushed to the target service.

   You need to further configure the certificate on the console of the service to enable HTTPS for it.

6. Check whether you need to immediately access the console of the target service to configure the certificate.
   • If yes, click Configure Now. The management page of the target service is displayed. Configure the certificate:
   • If no, click Continue Pushing or in the upper right corner of the page. The certificate push page or SSL certificate management page is displayed.

     You can access the console of the target service for certificate management.

   You can view the latest 10 push records on the certificate push page.

Follow-up Operation

You can manage pushed certificates on the console of the corresponding service.

If you have any questions during the configuration, refer to the corresponding service documentation or consult the corresponding service personnel.

• WAF: You need to configure a certificate when adding a domain to WAF if HTTPS is used for communications between the client and WAF. If you choose to push the certificate to WAF in one click, you can select the pushed certificate in WAF. Otherwise, you need to manually upload the certificate.

  If a certificate has been configured in WAF, you only need to update the certificate.