Background information

With the downloaded certificate, you can connect to the endpoint exposed from the cluster by using Docker Swarm API or Docker client. For more information, see Connect to a cluster by using Docker tools.


  1. Obtain the access address.
    1. Log on to the Container Service console.
    2. Log on to the Container Service console.
    3. Click  Clusters in the left-side navigation pane. On the Cluster List page, click Manage at the right of a cluster.

    4. The cluster details page is displayed, showing the cluster connection information.

  2. Download and save the TLS certificate.

    Configure a TLS certificate before you use the preceding access address to access the Docker cluster.

    Click Download Certificate in the cluster details page to download the TLS certificate. The file is downloaded.   certificate.  The file is downloaded.   In the following example, the downloaded certificate is saved to the   ~/.acs/certs/ClusterName/ directory. ClusterName indicates the name of your cluster.  You can save the certificate to a different directory, but we recommend using the  ~/.acs/certs/ClusterName/ directory for easy management.

    mkdir ~/.acs/certs/ClusterName/ #Replace ClusterName with your cluster name
     cd ~/.acs/certs/ClusterName/
     cp /path/to/ .

    The file contains ca.pem, cert.pem, and key.pem.