Help Center/ Web Application Firewall/ Troubleshooting/ Checking for Permission Exceptions/ Why Cannot I Select an SCM Certificate When Adding a Domain Name to WAF?
Updated on 2024-07-12 GMT+08:00

Why Cannot I Select an SCM Certificate When Adding a Domain Name to WAF?

Symptom

SSL certificates cannot be selected when adding a domain name to WAF. A message is displayed, indicating that the account does not have the permission to access the scm cert download API.

Causes

The account you use does not have the SCM Administrator or SCM FullAccess permissions.

Solution

Go to the IAM console and assign the SCM Administrator and SCM FullAccess permissions to the account. Then, you can select the SCM certificate under the same account when adding a domain name to WAF.