Help Center/ Web Application Firewall/ User Guide/ Objects/ Managing Certificates/ Deleting a Certificate from WAF
Updated on 2026-10-10 GMT+08:00
View PDF
Share

Deleting a Certificate from WAF

If a WAF certificate expires or is leaked, or your service goes offline, you need to delete the certificate from the protected domain name before deleting it. This prevents deletion failures and certificate data loss and ensures that HTTPS protection is available for domain names.

Typical Application Scenarios

  • Certificate expiration: If a certificate expires, WAF cannot provide HTTPS protection. In this case, delete the certificate from the domain name, delete the expired certificate, and upload a new certificate.
  • Certificate leakage risk: If the private key of a certificate is leaked, replace the certificate for the domain name and delete the old certificate.
  • Service domain name offline: If a protected domain name is no longer used, delete the certificate from the domain name and delete the certificate.

Constraints

If a certificate to be deleted is bound to a website, unbind it from the website before deletion.

Impact on the System

  • Deleting a certificate does not directly affect services. However, if the certificate has not been replaced or deleted from a website, the deletion will fail. If the certificate has been deleted from the domain name, deleting it will not affect online services.
  • A deleted certificate cannot be recovered. Before deleting a certificate, ensure that it is no longer needed. You are advised to back up the certificate file before the deletion.

Prerequisites

The certificate you want to delete is not bound to a protected website.

Deleting a Certificate from WAF

  1. Log in to the WAF console.
  2. Click in the upper left corner and select a region or project.
  3. (Optional) If you have enabled the enterprise project function, in the upper part of the navigation pane on the left, select your enterprise project from the Filter by enterprise project drop-down list. Then, WAF will display the related security data in the enterprise project on the page.
  4. In the navigation pane on the left, choose Objects > Certificates.
  5. In the row of the certificate, click More > Delete in the Operation column.
  6. In the displayed dialog box, click OK.

    Figure 1 Deleting a certificate from WAF

    After completing the preceding configurations, you can perform the following operations to verify the configurations:

    • Return to the certificate list page and verify that the target certificate is no longer displayed in the list.
    • (Optional) Switch the enterprise project, refresh the page, and verify that no certificate is left.

Related Operations

If a certificate to be deleted is bound to a website, unbind it from the website before deletion.

To unbind a certificate from a website domain name, take the following steps:

  1. In the Domain Name column of the row containing the desired certificate, click the domain name to go to the basic information page.
  2. Click next to the certificate name. In the displayed dialog box, upload a new certificate or select an existing certificate.

Related Documents

Parent Topic: Managing Certificates