Certificate

The Certificate feature complies with the digital certificate protocol. Trusted certificate authorities (CAs) issue digital certificates after verifying the identity of a server. The issued certificates can verify server identities and encrypt data transmission.

Currently, the Certificate feature is only applied to load balancing services. If you use HTTPS for your load balancing listener, you need to bind a certificate.

Prepare a certificate in advance. You can use relevant tools to generate a self-signed certificate or purchase a certificate issued by a CA.
Upload the prepared certificate to the Cloud. Note that both certificates and certificate chains can be uploaded.
Note that the load balancing service supports only PEM certificates. Before you upload a certificate, make sure that the certificate, private key, and certificate chain meet the format requirements.

Create Certificate

In the navigation pane of the ZStack Private Cloud UI, choose Platform Management > Certificate. On the Certificate page, click Create Certificate. On the displayed Create Certificate page, set the following parameters:

Name: Enter a name for the certificate.
Description: Optional. Enter a description for the certificate.
Certificate Text: Enter the certificate text that you prepared before.
- The certificate text starts from and ends with -----BEGIN CERTIFICATE-----, -----END CERTIFICATE-----, respectively.
- The certificate text cannot contain spaces.
- Example:
```
-----BEGIN CERTIFICATE-----
#end-user certificate#
-----END CERTIFICATE-----
```
Private Key: Enter the private key that you prepared before.
- The private key starts from and ends with -----BEGIN PRIVATE KEY-----, -----END PRIVATE KEY-----, respectively.
- The private key cannot contain spaces.
- Example:
```
-----BEGIN PRIVATE KEY-----
#private key#
-----END PRIVATE KEY-----
```
Certificate Chain: Optional. If you need to upload multiple certificates, you must combine the root certificate and intermediate certificates into a chain and upload the certificate chain instead.
- Put the root certificate in the first place, and intermediate certificates from the second place in sequence. Note that no blank lines can be contained between certificates.
- The certificate text cannot contain spaces.
- Example:
```
-----BEGIN CERTIFICATE-----
#root certificate#
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
#intermediates certificate#
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
#intermediates certificate#
-----END CERTIFICATE-----
```

As shown in Figure 1.

Certificate Operations

Change name and description: Change the name and description of a certificate.
Delete: Delete a certificate. If the certificate is bound with one or more listeners, deleting the certificate will also unbind it from the listeners.
Unbind certificate: Unbind a certificate from a listener.