After you purchase an SSL certificate in the Certificate Management Service console and the certificate is issued, you can download the certificate and install the certificate on a server or a cloud service to implement encrypted communication over HTTPS.
Scenario | Description |
Install a downloaded certificate on a web application server, such as a Tomcat, NGINX, Apache, or Internet Information Services (IIS) server. | |
Create a certificate deployment task to deploy an issued certificate to an Alibaba Cloud service immediately or at a specific point in time. | |
Deploy a certificate to a simple application server or an ECS instance of Alibaba Cloud | Create a deployment task to upload the configuration files of a certificate to the specified directory of a cloud server, or upload the files to replace the existing certificate configuration files in the directory. This helps complete the automatic update of a certificate for web applications on a cloud server. This also prevents errors and complex operations during manual download or upload of a certificate. Note A certificate deployment task can only synchronize a certificate to the specified directory on a cloud server. The task cannot modify the paths to the certificate configuration files on the web application server that uses the certificate and is installed on the cloud server. Web application servers include Apache and NGINX servers. Therefore, a certificate deployment task is suitable only for the deployment of an updated certificate. The first time you deploy a certificate, we recommend that you manually specify the paths to the certificate configuration files and the related parameters on the web application server. Then, you can create a certificate deployment task to synchronize the certificate to a specific directory of the cloud server on which the web application server is installed. Make sure that the paths to the certificate configuration files on the cloud server are consistent with the paths configured on the web application server. When the certificate is updated, you can create a certificate deployment task to directly replace the certificate configuration files in the specified directory of the cloud server. This eliminates the need to modify the certificate configuration files on the web application server and implements automatic certificate update. For more information about the configuration path to a certificate and the related parameters on a web application server, see Install an SSL certificate on a web application server. |
Deploy a certificate to a cloud service of a third-party cloud | Deploy a certificate to a third-party cloud service by using Certificate Management Service. This simplifies certificate migration and configuration. |