Deploying an SSL Certificate to WAF

Updated on 2023-12-20 GMT+08:00

View PDF

When an SSL certificate is issued, you can deploy it to Web Application Firewall (WAF) on Huawei Cloud in just a few clicks. With SSL certificates, data access to your website protected with WAF is more secure.

Prerequisites

You have enabled WAF, routed your website domain name to WAF, and configured an SSL certificate for the domain name in WAF.
If you have not purchased WAF or the domain name you want to use the certificate for has not been added to WAF, deploying the certificate to WAF may fail.
You have an SSL certificate that is in Issued or Hosted status.

Constraints

Currently, you can use SCM to quickly deploy an SSL certificate to WAF in the default enterprise project only. For other enterprise projects, download the certificates first, upload them to WAF, and then deploy them in WAF.
If you select Upload a CSR for CSR when applying for a certificate, the issued certificate cannot be directly deployed to other cloud products through SCM. To use a certificate in a cloud product, download the certificate to your local PC first. Then, upload it to the cloud product and complete deployment.

Procedure

Log in to the management console.
Locate the row containing the certificate you want to deploy on other cloud product, and click Deploy in the Operation to go to the certificate deployment details page.

Figure 1 Deploy
On the displayed page, select WAF in the Deployment Details area.

Figure 2 Selecting a cloud product
Click on the right of the Region drop-down list and select the region where you want to deploy the certificate.
Select the domain name you want to deploy the certificate for and click Deploy in the Operation column.

To deploy the certificate for multiple domain names, select all the domain names you want and click Deploy above the domain name list.
In the displayed confirmation dialog box, click Confirm.

When the certificate is deployed, the Deployment column for the domain name reads Deployed.