Register and manage certificates

Register certificate

To register a certificate that you own with Certificate Manager:

1. Go to the KakaoCloud console > Management > Certificate Manager.

2. On the Certificate page, click [Register certificate].

3. In the Register certificate popup, enter the following information. You can paste the original PEM-formatted text, including the header and footer, or click [Upload file] for each field and select the corresponding file.

   Certificate private key

   • The private key paired with the certificate and used to decrypt encrypted communications.

   • It is generally provided as a .pem or .key file in the following format:

     -----BEGIN PRIVATE KEY-----
     (Base64-encoded key)
     -----END PRIVATE KEY-----

   Certificate body

   • The certificate issued by a certificate authority (CA).

   • It is generally provided as a .pem, .crt, or .cer file in the following format:

     -----BEGIN CERTIFICATE-----
     (Base64-encoded certificate body)
     -----END CERTIFICATE-----

   Certificate chain (optional)

   • A chain consisting of root and intermediate CA certificates. It provides the trust path that clients use to validate the certificate.

   • It is generally provided as a file such as chain.pem or ca-bundle.crt and contains multiple certificate blocks:

     -----BEGIN CERTIFICATE-----
     (Intermediate CA certificate)
     -----END CERTIFICATE-----
     
     -----BEGIN CERTIFICATE-----
     (Root CA certificate)
     -----END CERTIFICATE-----

   Caution

   If a certificate file has a .crt, .key, or .cer extension, verify that its contents are PEM-formatted text, such as -----BEGIN CERTIFICATE----- or -----BEGIN PRIVATE KEY-----. If the file is a binary DER file, convert it to PEM format using a tool such as OpenSSL before entering it.

4. Click [Register]. Verify that the certificate is added to the list.

View certificates

You can view the list of registered certificates, certificate details, and listeners using a certificate.

View certificate list

1. Go to the KakaoCloud console > Management > Certificate Manager.

2. On the Certificate page, view the certificate list.

   Item	Description
   Domain	Certificate domain. Click the domain to go to the details page. Expired is displayed for an expired certificate.
   ID	Unique certificate identifier. Click [Copy] to copy it.
   Registration date	Date and time when the certificate was registered.
   Expiration date	Date and time when the certificate expires.

View certificate details

1. Go to the KakaoCloud console > Management > Certificate Manager.

2. In the Certificate list, click the Domain of the certificate to view.

3. On the Details tab, view the following information:

   Item	Description
   Domain	Certificate domain.
   ID	Unique certificate identifier.
   Registration date	Date and time when the certificate was registered.
   Expiration date	Date and time when the certificate expires.

View listeners using certificate

1. Go to the KakaoCloud console > Management > Certificate Manager.

2. In the Certificate list, click the Domain of the certificate to view.

3. On the Listeners in use tab, view the following information:

   Item	Description
   Load balancer name	Name of the load balancer to which the listener belongs. Click the name to go to the load balancer details page.
   Load balancer ID	Unique load balancer identifier. Click [Copy] to copy it.
   Load balancer provisioning status	Status of load balancer creation or change operations.
   Listener protocol : Port	Protocol and port on which the listener receives requests. Example: HTTPS : 443.
   Listener ID	Unique listener identifier. Click [Copy] to copy it.
   Listener provisioning status	Status of listener creation or change operations.
   Certificate role	Certificate association role, displayed as Default or Additional. See Certificate role.

Manage certificates

Link certificate

You can use registered certificates with the following services:

Service	Description
Kubernetes Engine	Enter a certificate ID in the configuration file when creating a load balancer. For more information, see Create and delete load balancers.
Load Balancing	Select a certificate registered with Certificate Manager when adding or managing a listener. For more information, see Add and manage listeners.

Change listener certificate

You can replace the certificate currently used by a listener with another certificate. If you need a new certificate because the current certificate is expiring, register it first. Then, on the details page of the current certificate, select the new certificate and the listeners for which to replace the certificate.

1. Go to the KakaoCloud console > Management > Certificate Manager.

2. In the Certificate list, click the Domain of the certificate currently used by the listener.

3. On the details page, click [Change listener certificate].

   • Alternatively, in the certificate list, click [⋮] for the certificate and select Change listener certificate, or select the certificate and click [Change listener certificate] at the top of the list.

4. In the Change listener certificate popup, verify the current certificate information. Under New certificate, select the certificate to use.

   • Verify the certificate ID, domain, and expiration date and time before selecting a certificate.
   • Enter a search term or turn on Show selectable items only to find a certificate.
   • You cannot select the current certificate or an expired certificate.

5. In the Listeners in use list, verify the load balancer name and the listener protocol, port, and ID. Select the listeners for which to replace the certificate.

   Caution

   While the certificate replacement is in progress, you cannot perform other operations on the load balancer.

6. Verify the selected certificate and target listeners, and then click [Change].

7. Check the progress in Task Manager. After the operation is complete, verify the certificate applied to the listener of the target load balancer.

Delete certificate

You can delete certificates that are no longer in use. Before deleting a certificate, check the listeners using the certificate. If a listener requires another certificate, change the listener certificate first.

Caution

Deleted certificates cannot be recovered.

1. Go to the KakaoCloud console > Management > Certificate Manager.
2. In the Certificate list, click [⋮] for the certificate to delete and select Delete.
   • Alternatively, select the certificate and click [Delete] at the top of the list, or click [Delete] on the certificate details page.
3. In the Delete certificate popup, verify the Domain and ID of the certificate to delete.
4. Enter permanent delete, and then click [Delete].