Updated on 2023-09-25 GMT+08:00

Auto-renewing an SSL Certificate

You can enable auto-renewal to let the system renew your certificate before it expires. The system automatically renews a certificate within 30 days before it expires.

Auto-Renewal Restrictions

  • Only paid SSL certificates that have been purchased in Huawei Cloud SCM and are about to expire can be renewed. Uploaded certificates, free certificates, and single-domain expansion packages cannot be renewed.
  • If auto-renewal is enabled for a certificate, the system automatically purchases a new certificate that has the same specifications as the original one 30 days before the original one expires and submits a certificate application using the application information of the original certificate. You still need to cooperate with the CA to complete domain name ownership and/or organization verification. The CA will not issue the new certificate until they validate your domain name ownership and identity.
  • The renewal certificate and the original certificate are two independent certificates. Once the renewed certificate is issued, you need to install it on the web server or deploy it on the Huawei Cloud product the original one is deployed.
  • The new certificate inherits the remaining validity period of the original certificate. For example, your one-year certificate will expire on November 30, 2022. If you renew the certificate and the CA issues it on November 25, 2022, the new certificate will expire on November 30, 2023. The validity period of the new certificate is one year plus the remaining validity period (five days in this case) of the original certificate.

    For restrictions on auto-renewals, see Auto-Renewal Restrictions.

    A DigiCert DV (basic) wildcard-domain certificate you obtain through renewal cannot inherit the remaining validity of the old certificate.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the page and choose Security & Compliance > Cloud Certificate Management Service.
  3. In the navigation pane, choose SSL Certificate Manager > SSL Certificates.
  4. In the row containing the certificate you want to renew, click in the Auto-renewal column to enable auto-renewal.