Updated on 2023-12-20 GMT+08:00

Deploying an SSL Certificate to ELB

When an SSL certificate is issued, you can deploy it to Elastic Load Balance (ELB) in just a few clicks. With SSL certificates, data access to your website that uses ELB is more secure.

Prerequisites

  • You have enabled Elastic Load Balance (ELB) as required below, added your website domain name to ELB, and configured an SSL certificate for the website in ELB.

    If you have not purchased ELB or the domain name you want to use the certificate for has not been added to ELB, deploying the certificate to ELB may fail.

  • You have an SSL certificate that is in Issued or Hosted status.

Constraints

  • You have configured the original certificate in ELB. This means the certificate that is being used for ELB and you want to update in SCM must have been configured in ELB at the very beginning. Then, you can quickly update it in SCM. For details, see
  • You can use SCM to update the certificate deployed on listeners in ELB. If you update an SSL certificate in SCM, the certificate content and private keys are updated in ELB accordingly. ELB then updates the certificate content and private keys on all listeners where the certificate is deployed for.
  • To update a certificate used for ELB in SCM, domain names must be associated with the certificate in ELB.
  • If an ELB certificate is used for multiple domain names, ensure that the new certificate you want to update in SCM for ELB must match with those domain names. If they do not match, the domain names in the new certificate will overwrite the ones in the original certificate after the update.

    For example, the primary domain name and additional domain name of the new certificate are example01.com and example02.com, respectively, and the domain names associated with the original certificate in ELB are example01.com and example03.com. When you update the certificate in SCM, the domain names associated with the certificate in ELB are updated to example01.com and example02.com.

  • If you select Upload a CSR for CSR when applying for a certificate, the issued certificate cannot be directly deployed to other cloud products through SCM. To use a certificate in a cloud product, download the certificate to your local PC first. Then, upload it to the cloud product and complete deployment.

Procedure

  1. Log in to the management console.
  2. Locate the row containing the certificate you want to deploy on other cloud product, and click Deploy in the Operation to go to the certificate deployment details page.

    Figure 1 Deploy

  3. On the displayed page, select ELB in the Deployment Details area.

    Figure 2 Selecting a cloud product

  4. Click on the right of the Region drop-down list and select the region where you want to deploy the certificate.
  5. Select the domain name you want to update the certificate for and click Update Certificate in the Operation column.

    To update the certificates for multiple domain names, select all the target domain names and click Batch Update above the domain name list.
    Figure 3 Updating a certificate

  6. In the displayed confirmation dialog box, click Confirm.

    Figure 4 Certificate update confirmation box

    If a message indicating that the certificate is updated successfully is displayed, the SSL certificate is updated for ELB.