Help Center/ Cloud Certificate Manager/ SSL Certificate Manager (SCM) User Guide/ Installing an SSL Certificate/ Deploying an SSL Certificate to Other Huawei Cloud Products/ Deploying an SSL Certificate to ELB
Updated on 2024-12-20 GMT+08:00
View PDF
Share

Deploying an SSL Certificate to ELB

When an SSL certificate is issued, you can deploy it to Huawei Cloud Elastic Load Balance (ELB) in just a few clicks. With SSL certificates, data access to your website that uses ELB is more secure.

Prerequisites

  • You have enabled Elastic Load Balance (ELB) as required below, added your website domain name to ELB, and configured an SSL certificate for the website in ELB.

    If you have not purchased ELB or the domain name you want to use the certificate for has not been added to ELB, deploying the certificate to ELB may fail.

  • You have an SSL certificate that is in Issued or Hosted status.

Constraints

  • You need to create a listener and configure HTTPS for the listener so that you can use CCM to deploy SSL certificates in just a few clicks.
  • If an ELB certificate is used for multiple domain names, ensure that the new certificate you want to update in CCM for ELB must match with those domain names. If they do not match, the domain names in the new certificate will overwrite the ones in the original certificate after the update.
  • If you select Upload a CSR for CSR when applying for a certificate, the issued certificate cannot be directly deployed to other cloud products through SCM because no private key of the certificate is available on the cloud. To use a certificate in a cloud product, download the certificate to your local PC first. Then, upload the certificate and private key to the cloud product and complete deployment.

You can use SCM to update the certificate deployed on listeners in ELB. If you update an SSL certificate in SCM, the certificate content and private keys are updated in ELB accordingly. ELB then updates the certificate content and private keys on all listeners where the certificate is deployed for.

Deploying Certificates

  1. Log in to the management console.
  2. Click in the upper left corner of the page and choose Security & Compliance > Cloud Certificate Management Service. The service console is displayed.
  3. In the navigation pane on the left, choose SSL Certificate Manager > SSL Certificates.
  4. Locate the row containing the certificate you want to deploy on other cloud product, and click Deploy in the Operation to go to the certificate deployment details page.

    Figure 1 Deploying a certificate

  5. On the displayed page, select ELB in the Deployment Details area.

    Figure 2 Selecting ELB

  6. Click on the right of the Region drop-down list and select the region where you want to deploy the certificate.
  7. Select the domain name you want to update the certificate for and click Update Certificate in the Operation column.

    To update the certificates for multiple domain names, select all the target domain names and click Batch Update above the domain name list.

  8. In the displayed dialog box, confirm the information, and click Confirm.

    If a message indicating that the certificate is updated successfully is displayed, the SSL certificate is updated for ELB.

Other Operations

If the certificate is updated on CCM, the certificate deployed on the ELB listener is also updated. You can view information about the bound ELB listener on CCM.

Figure 3 Viewing listener information