Database Autonomy Service:SSL certificate

Prerequisites

• The target database instance must be added to DAS.

• The database instance is one of the following types:

  • ApsaraDB RDS for MySQL

  • PolarDB for MySQL

• To use the SSL certificate management feature as a RAM user, you must grant the RAM user the AliyunHDMReadOnlyAccess or AliyunHDMFullAccess permission. For more information, see Use DAS as a RAM user.

Procedure

1. Log on to the DAS console.

2. In the left-side navigation pane, choose Security Center > Global Security Management.

3. On the Global Security Management page, click the SSL certificate tab.

   Note

   • SSL Enabled Instances: The number of connected instances that have SSL enabled, either fully or partially.

   • In the main table, click an instance ID to open the instance's Basic Information page. Click Details to open the SSL management page, where you can modify the instance's SSL settings.

   At the top of the page, use the filter bar to search by instance ID or name. You can also filter by Database type, Region, or SSL certificate status. The main table also includes columns such as Database type, Region, and Status.

   Main table
   SSL Certificate Status	The overall SSL status of the instance. Valid values: Enabled, Partially Enabled, and Disabled. Note Only endpoints that support SSL are included in the statistics. ApsaraDB RDS for MySQL instances do not support per-endpoint SSL configuration, so individual endpoints do not need to be tracked. The SSL information in the subtable is the same as the SSL information of the instance. Therefore, an ApsaraDB RDS for MySQL instance can only have a status of Enabled or Disabled. For PolarDB for MySQL instances, SSL is supported for three endpoint types: primary endpoint, cluster endpoint, and custom endpoint.
   SSL Certificate Expiration Time	The earliest expiration date among all SSL certificates on the instance's endpoints.

4. Click the icon to the left of a target instance to view its detailed SSL information.

   Subtable
   Endpoint ID	This field is empty for ApsaraDB RDS for MySQL instances. For PolarDB for MySQL instances, this field corresponds to the EndpointId field on the Basic Information page in the instance console.
   Endpoint Type	This field is empty for ApsaraDB RDS for MySQL instances. For PolarDB for MySQL instances, the options are primary endpoint, cluster endpoint, and custom endpoint.
   SSL-protected Endpoint	The connection address for the SSL-encrypted endpoint.
   SSL Certificate Status	The SSL status of the instance endpoint. Valid values: Enabled and Disabled. Note When the status is Disabled, the SSL-protected Endpoint, SSL Certificate Type, and SSL Certificate Expiration Time fields are empty.
   SSL Certificate Type	The SSL certificate type for the instance endpoint includes two options: Cloud Certificate and Custom Certificate, which correspond to Use Cloud Certificate and Use Custom Certificate, respectively. Note PolarDB for MySQL does not support Custom Certificates.
   SSL Certificate Expiration Time	The expiration date of the SSL certificate for the instance endpoint. Note SSL certificate expiration dates are displayed in your browser's time zone.

FAQ