Deploying an SSL Certificate to WAF

When an SSL certificate is issued, you can deploy it to Web Application Firewall (WAF) on cloud in just a few clicks. With SSL certificates, data access to your website protected with WAF is more secure.

Prerequisites

You have enabled WAF, routed your website domain name to WAF, and configured an SSL certificate for the domain name in WAF.
If you have not purchased WAF or the domain name you want to use the certificate for has not been added to WAF, deploying the certificate to WAF may fail.
You have uploaded the SSL certificate issued by another platform to CCM and the certificate is in Hosted status.

Constraints

Currently, you can use SCM to quickly deploy an SSL certificate to WAF in the default enterprise project only. For other enterprise projects, download the certificates first, upload them to WAF, and then deploy them in WAF.

Procedure

Log in to the management console.
Click in the upper left corner of the page and choose Security & Compliance > Cloud Certificate Management Service. The service console is displayed.
In the navigation pane on the left, choose SSL Certificate Manager > SSL Certificates.
In the row containing the target certificate, click Deploy in the Operation column.
On the displayed page, select WAF in the Deployment Details area.
Click on the right of the Region drop-down list and select the region where you want to deploy the certificate.
Select the domain name you want to deploy the certificate for and click Deploy in the Operation column.

To deploy the certificate for multiple domain names, select all the domain names you want and click Deploy above the domain name list.
In the displayed confirmation dialog box, click Confirm.

When the certificate is deployed, the Deployment column for the domain name reads Deployed.