Certificate Management Service:Deploy Certificates

Scenario

Description

Download an SSL certificate

Different types of servers support different formats of certificates. To facilitate certificate deployment, Certificate Management Service provides certificate packages that are suitable for servers such as NGINX, Spring Boot, Apache Tomcat, Apache HTTPD, and Internet Information Services (IIS) servers. You can download and use the packages without the need to convert the formats of certificates.

Manually install a certificate on a web application server

You can install a downloaded certificate on a web application server, such as a Tomcat, NGINX, Apache, or IIS server.

Deploy a certificate to an Alibaba Cloud service in the Certificate Management Service console

You can create a deployment task in the Certificate Management Service console to deploy a single certificate to an Alibaba Cloud service, such as Alibaba Cloud CDN (CDN), Web Application Firewall (WAF), or Object Storage Service (OSS), or to deploy multiple certificates to multiple Alibaba Cloud services at the same time. You can specify the point in time at which you want to run the deployment task. The system starts the deployment task at the specified point in time.

Install a certificate on an Alibaba Cloud simple application server or an ECS instance in the Certificate Management Service console

• Manually install a certificate on an Alibaba Cloud simple application server or an ECS instance: This feature allows you only to upload a certificate to a specific directory on a cloud server. This feature does not allow you to modify the paths to the certificate configuration files on the web application server that uses the certificate and is installed on the cloud server. Web application servers include Apache and NGINX servers. This feature is suitable only for scenarios in which a certificate needs to be automatically updated. The first time you install a certificate, we recommend that you refer to Manually install an SSL certificate on a web application server.

• Install a certificate on an Alibaba Cloud ECS instance: This feature supports only Elastic Compute Service (ECS) instances. After you complete the required configurations for ECS instances and the web application servers on the instances, you can install certificates on the instances by using deployment tasks.

Deploy a certificate to a third-party cloud service in the Certificate Management Service console

If you use a third-party cloud service, you can refer to this topic to deploy a certificate issued by using Alibaba Cloud to the service. This helps simplify the certificate migration and configuration process.