<p>You can create two different types of certificates: server certificate and CA certificate.</p> <ul> <li><strong>Server certificate</strong>&mdash;The optional certificate when creating HPPS listener and the optional certificate when creating TCP + SSL listener.</li> <li><strong>CA certificate</strong>&mdash;The optional certificate for full link encryption function in the advanced function of HTTPS listener.</li> </ul> <p>Enter certificate management first and upload the certificate to ELB. During the process of creating a listener, you can directly select the corresponding certificate.</p> <p><strong><span style="font-size:18px">Prerequisites</span></strong></p> <p>You have purchased the server certificate/CA certificate and held the certificate&#39;s public/private key file.</p> <p><strong><span style="font-size:18px">Procedures</span></strong></p> <p>1.&nbsp;Log in to the <a href="https://pinganyun.com/console/loadBalance/overview" target="_blank">ELB Console</a>.</p> <p>2.&nbsp;In the left navigation pane, click <strong>Certificate </strong>and enter the<strong> Add </strong>page.</p> <p>3.&nbsp;In the upper-right corner of the page, click <strong>Create</strong> to enter <strong>Create Certificate</strong> page.</p> <p>4.&nbsp;Create a certificate based on the following information.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607150158-10323479931f.png" style="height:709px; width:830px" /></p> <p><strong>Configuration Information</strong></p> <table border="1" cellpadding="0" cellspacing="0" style="width:0px"> <tbody> <tr> <td style="background-color:#ededed; width:160px"> <p><strong>Configuration item</strong></p> </td> <td style="background-color:#ededed; vertical-align:top; width:621px"> <p><strong>Description</strong></p> </td> </tr> <tr> <td style="width:160px"> <p>Certificate Name</p> </td> <td style="vertical-align:top; width:621px"> <p>Customize the certificate name, which is the<strong> Display Name</strong> of the certificate.</p> </td> </tr> <tr> <td style="width:160px"> <p>Certificate</p> </td> <td style="vertical-align:top; width:621px"> <p>Copy the certificate content into the field. You can click<strong> Import the sample</strong> to view the correct certificate format. After the certificate content is submitted, the correctness of the certificate content and certificate style will be automatically verified. For the format requirements of certificate content, see <a href="https://www.pinganyun.com/ssr/help/network/elb/manual.certificatemanage.format" target="_blank">Certificate Format Requirements</a>.</p> </td> </tr> <tr> <td style="width:160px"> <p>Private Key</p> </td> <td style="vertical-align:top; width:621px"> <p>Copy the private key content of the certificate into the field. You can click<strong> Import the sample </strong>to view the correct certificate format. After the private key is submitted, the correctness of the format of private key will be automatically verified. For more information of the format requirements of private key, see <a href="https://www.pinganyun.com/ssr/help/network/elb/manual.certificatemanage.format" target="_blank">Certificate Format Requirements</a>.</p> </td> </tr> <tr> <td style="width:160px"> <p>Certificate Chain</p> </td> <td style="vertical-align:top; width:621px"> <p>Click the <strong>Certificate Chain</strong> switch to enable the certificate chain and copy the certificate chain into the field. To add an intermediate certificate, click<strong> Add Certificate</strong> to open a new field, copy the certificate chain into the field. You can add multiple intermediate certificates as needed. For more information of the format requirements of certificate chain, see <a href="https://www.pinganyun.com/ssr/help/network/elb/manual.certificatemanage.format" target="_blank">Certificate Format Requirements</a>.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201607150406-13fe6e129934.png" style="height:14px; margin:1px; width:50px" />: you need to configure all certificate contents from sub certificate to root certificate, and make sure that the order of configuration is hierarchical from sub certificates to root certificates.</p> </td> </tr> </tbody> </table> <p>5.&nbsp;Click<strong> Create</strong>, and you will see an <strong>Operation succeeded </strong>message at the bottom of the page.</p>