If you use a certificate that is issued by a third-party service provider, you can click Upload Certificate in the Certificate Management Service console to upload the certificate for centralized management. The issued certificate can use an internationally accepted algorithm or the SM2 algorithm.
Preparations
Before you upload a certificate, prepare the following files:
A PEM-encoded certificate file in the PEM or CRT format and a PEM-encoded private key file in the KEY format. If the certificate is in another format, you can use a tool to convert the certificate to the required format. For more information, see Convert the format of a certificate.
A certificate file and a private key file for your signing certificate as well as a certificate file and a private key file for your encryption certificate. This applies if you want to upload an SM2 certificate. If you do not know the algorithm of your certificate, you can view the algorithm in the certificate details. For more information, see View information about a certificate.
After you upload a certificate to the Certificate Management Service console, you cannot download the certificate. This helps ensure the data security of your certificate.
Procedure
- Log on to the Certificate Management Service console.
- In the left-side navigation pane, click SSL Certificates.
On the SSL Certificates page, click the Manage Uploaded Certificates tab. Then, click Upload Certificate.
In the Upload Certificate panel, configure the parameters and click OK.
The parameters that you must configure when you set Certificate Algorithm to Internationally Accepted Algorithm are different from the parameters that you must configure when you set Certificate Algorithm to SM2 Algorithm. The following tables describe the parameters.
Internationally Accepted Algorithm
Parameter
Description
Certificate Algorithm
Select Internationally Accepted Algorithm. This type of algorithm is released by the National Security Agency (NSA) of the United States. Certificate Management Service supports the Rivest-Shamir-Adleman (RSA) algorithm, which is an asymmetric cryptography algorithm.
Certificate Name
Enter a name for the certificate that you want to upload.
The name can contain letters, digits, periods (.), underscores (_), and hyphens (-).
Certificate File
Enter the content of the PEM-encoded certificate file.
You can use one of the following methods to enter the content. Method 1: Use a text editor to open the certificate file in the PEM or CRT format. Then, copy the content to the Certificate File field. Method 2: Click Upload below the Certificate File field. Then, select the certificate file from your computer to upload the content of the file.
Certificate Key
Enter the content of the PEM-encoded private key file. You can use one of the following methods:
Manually specify the content: Use a text editor to open the private key file in the KEY format. Then, copy the content to the Certificate Key field.
Upload the private key file: Click Upload below the Certificate Key field. Then, select the private key file from your computer to upload the file content to the field.
Select an existing CSR: You can select a certificate signing request (CSR) that is created in or uploaded to the Certificate Management Service console. The system automatically matches the CSR of the specified certificate file. For more information about how to manage CSRs, see Manage CSRs.
NoteIf the system reports an error that the certificate and private key do not match after you upload the private key file, the private key file may contain RSA characters. You can run the
openssl rsa -in <Original name of the private key file> -out <New custom name of the private key file>command to convert the characters and upload the file again.Certificate Chain
Optional. Enter the content of the certificate chain file. If the certificate file contains the complete certificate chain, you do not need to configure this parameter. For more information about how to check the integrity of a certificate chain in a certificate file, see How do I troubleshoot the issue that the certificate chain of a website is incomplete?
You can use one of the following methods to enter the content. Method 1: Use a text editor to open the certificate chain file. Then, copy the content to the Certificate Chain field. Method 2: Click Upload below the Certificate Chain field. Then, select the certificate chain file from your computer to upload the content of the file.
SM2 Algorithm
Parameter
Description
Certificate Algorithm
Select SM2 Algorithm. This type of algorithm is released by the State Cryptography Administration (SCA) of China. Certificate Management Service supports the SM2 algorithm, which is an asymmetric cryptography algorithm.
Certificate Name
Enter a name for the certificate that you want to upload.
The name can contain letters, digits, underscores (_), and hyphens (-).
Certificate File
Enter the content of the PEM-encoded certificate file of the signing certificate that you want to upload.
You can use one of the following methods to enter the content. Method 1: Use a text editor to open the certificate file in the PEM or CRT format. Then, copy the content to the Certificate File field. Method 2: Click Upload below the Certificate File field. Then, select the certificate file from your computer to upload the content of the file.
Certificate Key
Enter the content of the PEM-encoded private key file of the signing certificate that you want to upload.
You can use one of the following methods to enter the content. Method 1: Use a text editor to open the private key file in the KEY format. Then, copy the content to the Certificate Key field. Method 2: Click Upload below the Certificate Key field. Then, select the private key file from your computer to upload the content of the file.
Encryption Certificate
Enter the content of the PEM-encoded certificate file of the encryption certificate that you want to upload.
You can use one of the following methods to enter the content. Method 1: Use a text editor to open the certificate file in the PEM or CRT format. Then, copy the content to the Certificate File field. Method 2: Click Upload below the Certificate File field. Then, select the certificate file from your computer to upload the content of the file.
Encryption Private Key
Enter the content of the PEM-encoded private key file of the encryption certificate that you want to upload.
You can use one of the following methods to enter the content. Method 1: Use a text editor to open the private key file in the KEY format. Then, copy the content to the Certificate Key field. Method 2: Click Upload below the Certificate Key field. Then, select the private key file from your computer to upload the content of the file.
After the certificate is uploaded, you can view the certificate in the certificate list. If you do not want to manage an uploaded certificate in the Certificate Management Service console, you can find the certificate and click Delete in the Actions column to delete the certificate. For more information, see Delete a certificate.
ImportantAfter a certificate is deleted, the certificate is removed from the list of uploaded certificates. The validity period of the certificate is not affected. A deleted certificate cannot be restored. Proceed with caution.