Help Center/ Cloud Certificate Manager/ SSL Certificate Manager (SCM) User Guide/ Installing an SSL Certificate/ Deploying an SSL Certificate to Other Huawei Cloud Products/ Deploying an SSL Certificate to WAF
Updated on 2024-12-20 GMT+08:00
View PDF
Share

Deploying an SSL Certificate to WAF

When an SSL certificate is issued, you can deploy it to Web Application Firewall (WAF) on Huawei Cloud in just a few clicks. With SSL certificates, data access to your website protected with WAF is more secure.

Prerequisites

  • You have enabled WAF, routed your website domain name to WAF, and configured an SSL certificate for the domain name in WAF.
  • If you have not purchased WAF or the domain name you want to use the certificate for has not been added to WAF, deploying the certificate to WAF may fail.
  • You have an SSL certificate that is in Issued or Hosted status.

Constraints

  • If you select Upload a CSR for CSR when applying for a certificate, the issued certificate cannot be directly deployed to other cloud products through SCM because no private key of the certificate is available on the cloud. To use a certificate in a cloud product, download the certificate to your local PC first. Then, upload the certificate and private key to the cloud product and complete deployment.

Deploying Certificates

  1. Log in to the management console.
  2. Click in the upper left corner of the page and choose Security & Compliance > Cloud Certificate Management Service. The service console is displayed.
  3. In the navigation pane on the left, choose SSL Certificate Manager > SSL Certificates.
  4. Locate the row containing the certificate you want to deploy on other cloud product, and click Deploy in the Operation to go to the certificate deployment details page.

    Figure 1 Deploying a certificate

  5. On the displayed page, select WAF in the Deployment Details area.

    Figure 2 Selecting WAF

  6. Click on the right of the enterprise project or region name and select the enterprise project or region to be deployed.
  7. Select the domain name you want to deploy the certificate for and click Redeploy in the Operation column.

    To deply the certificates for multiple domain names, select all the target domain names and click Batch Update above the domain name list.

  8. In the displayed dialog box, confirm the information, and click Confirm.

    When the certificate is deployed, the Deployment column for the domain name reads Deployed.