How Do I Obtain the Security Certificate of a CSS Security-Mode Cluster?

The security certificate (CloudSearchService.cer) can be downloaded only for security-mode clusters that have enabled HTTPS access.

When using certificate-based authentication in a public network environment, disable hostname verification. Otherwise, certificate verification will fail.

• Obtain the security certificate of an Elasticsearch cluster.
  1. Log in to the CSS management console.
  2. In the navigation pane on the left, choose Clusters > Elasticsearch.
  3. In the cluster list, click the name of the target cluster. The cluster information page is displayed.
  4. Click the Overview tab. In the Network Information area, click Download Certificate below HTTPS Access.
     Figure 1 Downloading a security certificate
     
• Obtain the security certificate of an OpenSearch cluster.
  1. Log in to the CSS management console.
  2. In the navigation pane on the left, choose Clusters > OpenSearch.
  3. In the cluster list, click the name of the target cluster. The cluster information page is displayed.
  4. Click the Overview tab. In the Network Information area, click Download Certificate below HTTPS Access.
     Figure 2 Downloading a security certificate