Updated on 2025-09-04 GMT+08:00

SCM Authorization

If your certificate has been uploaded to Cloud Certificate Manager (CCM) of Huawei Cloud, you can enable SCM authorization so that you can directly obtain the certificate content when configuring certificates on VOD.

Constraints

  1. IAM users can enable SCM authorization only when they have the following permissions.

    Associated Cloud Service

    Permission

    IAM

    • iam:roles:listRoles
    • iam:roles:createRole
    • iam:agencies:listAgencies
    • iam:agencies:createAgency
    • iam:permissions:checkRoleForAgency
    • iam:permissions:grantRoleToAgency
  2. After creating an agency, IAM users can configure certificates for domain names when they have the following permissions:
    • vod:domain:modifyHttpsSetting
    • vod:domain:getHttpsSetting
    • vod:domain:list

Enabling SCM Authorization

  1. Log in to the VOD console.
  2. In the navigation pane, choose Domains.
  3. In the upper right corner of the page, click Enable SCM Authorization.

    Figure 1 Cloud resource authorization

  4. Click OK. An agency named vod_admin_trust_{domainID} is created for you on the IAM console. VOD now has the permission to list your SCM certificates and export certificate details.

    Do not delete this agency. Otherwise, VOD cannot obtain certificate content when you configure an HTTPS certificate.