Updated on 2026-01-13 GMT+08:00

SCM Authorization

If your certificate has been uploaded to Cloud Certificate & Manager (CCM) of Huawei Cloud, you can enable SCM authorization so that you can directly select the certificate on the VOD console.

Constraints

  1. IAM users can enable SCM authorization only when they have the permissions below.

    Related Cloud Service

    Permission

    IAM

    • iam:roles:listRoles
    • iam:roles:createRole
    • iam:agencies:listAgencies
    • iam:agencies:createAgency
    • iam:permissions:checkRoleForAgency
    • iam:permissions:grantRoleToAgency
  2. After creating an agency, IAM users can configure certificates for domain names when they have the following permissions:
    • vod:domain:modifyHttpsSetting
    • vod:domain:getHttpsSetting
    • vod:domain:list

Enabling SCM Authorization

  1. Log in to the VOD console.
  2. In the navigation pane, choose Domain Name Management.
  3. In the upper right corner of the page, click Enable SCM Authorization.

    Figure 1 Cloud resource authorization

  4. Click OK.

    The system creates an agency named vod_admin_trust_{domain_ID} on the Agencies page of the IAM console. VOD now has the permissions to list your SCM certificates, query SCM certificate details, and export certificate details.

    Do not delete this agency. Otherwise, VOD cannot obtain certificate content when you configure an HTTPS certificate.