Help Center/ Cloud Certificate Manager/ Best Practices/ Best Practices for SSL Certificate Manager/ Deploying SSL Certificates to the Cloud in One Click/ Deploying an SSL Certificate to WAF in One Click
Updated on 2024-12-23 GMT+08:00
View PDF
Share

Deploying an SSL Certificate to WAF in One Click

Prerequisites

  • You have an SSL certificate that is in Issued or Hosted status in CCM.
  • You have enabled Web Application Firewall (WAF).

Notes and Constraints

  • If you select Upload a CSR for CSR when applying for a certificate, the issued certificate cannot be directly deployed to other cloud products through SCM. To use a certificate in a cloud product, download the certificate to your local PC first. Then, upload it to the cloud product and complete deployment.

Adding a Domain Name to WAF

Before deploying an SSL certificate to WAF, you need to add the domain name that will use the SSL certificate to WAF. For details, see:

When a domain name is added to WAF, HTTPS must be select for Client Protocol.

Deploying an SSL Certificate to WAF

  1. Log in to the management console.
  2. Click in the upper left corner of the page and choose Security & Compliance > Cloud Certificate Management Service. The service console is displayed.
  3. In the navigation pane on the left, choose SSL Certificate Manager > SSL Certificates.
  4. Locate the row containing the certificate you want to deploy on other cloud product, and click Deploy in the Operation to go to the certificate deployment details page.

    Figure 1 Deploying a certificate

  5. On the displayed page, select WAF in the Deployment Details area.

    Figure 2 Selecting WAF

  6. Click on the right of the enterprise project or region name and select the enterprise project or region to be deployed.
  7. Select the domain name you want to deploy the certificate for and click Redeploy in the Operation column.

    To deply the certificates for multiple domain names, select all the target domain names and click Batch Update above the domain name list.

  8. In the displayed dialog box, confirm the information, and click Confirm.

    When the certificate is deployed, the Deployment column for the domain name reads Deployed.

Replacing a Certificate Before It Expires

An SSL certificate issued by any CA around the world is valid for one year. You need to update an SSL certificate in a timely manner. Once your new certificate is issued, replace the old one with it by referring to Deploying an SSL Certificate to WAF.