Uploading a Certificate

Prerequisites

Login credentials have been obtained.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Choose Security > Web Application Firewall.
4. In the navigation pane, choose Certificates. The Certificates page is displayed, as shown in Figure 1.
   Figure 1 Certificates
   
   

   In the upper part of the certificate list, click Quota details to view the certificate quota.

5. In the upper right corner of the displayed page, click Upload Certificate. In the displayed Upload Certificate dialog box, enter the certificate name and paste the certificate file and private key to the corresponding text boxes. Figure 2 shows an example.
   Figure 2 Uploading a certificate
   
   

   • In the Upload Certificate dialog box, click Quota details to view the certificate quota.
   • WAF encrypts and saves the private key to keep it safe.
   • For details about the combination sequence of a certificate chain, see How Do I Fix an Incomplete Certificate Chain?
   Currently, only .pem certificates are supported. If the certificate is not in .pem format, convert it into a .pem certificate by referring to Table 1 before uploading.

   Table 1 Certificate conversion commands

   Format	Usage (Using OpenSSL)
   CER/CRT	Rename the cert.crt certificate file to cert.pem.
   PFX	Obtain a private key. For example, run the following command to convert cert.pfx into cert.key: openssl pkcs12 -in cert.pfx -nocerts -out cert.key -nodes Obtain a certificate. For example, run the following command to convert cert.pfx into cert.pem: openssl pkcs12 -in cert.pfx -nokeys -out cert.pem
   P7B	Convert a certificate. For example, run the following command to convert cert.p7b into cert.cer: openssl pkcs7 -print_certs -in cert.p7b -out cert.cer Rename certificate file cert.cer to cert.pem.
   DER	Obtain a private key. For example, run the following command to convert privatekey.der into privatekey.pem: openssl rsa -inform DER -outform PEM -in privatekey.der -out privatekey.pem Obtain a certificate. As an example, run the following command to convert cert.cer into cert.pem: openssl x509 -inform der -in cert.cer -out cert.pem

6. Click OK.
   

   • If the number of uploaded certificates reaches the upper limit, delete the certificates that are not associated with any domain names by referring to Deleting a Certificate and then upload a certificate again.
   • To modify a certificate name, click next to the target certificate name in the Certificate Name column.