In this section, you will learn how to import a third-party certificate via the UI interface.

1. Log in to ZStack Cloud.
2. Choose Settings > System and Security > Certificate Management.
3. On the Certificate Management page, click Add Certificate.
4. On the Import Certificate page, set the following parameters:
   • Import Mode: Choose Third-party Certificate.
   • Certificate Document: Upload or import a certificate.
     Note:

     • Only CRT and PEM formats are supported.
     • The certificate content starts with ----BEGIN CERTIFICATE---- and ends with ----END CERTIFICATE----.
   • Private Key: Upload or import a private key.
     Note:

     • Only KEY and PEM formats are supported.
     • The private key content starts with ----BEGIN (RSAIEC) PRIVATE KEY---- and ends with ----END (RSAIEC) PRIVATE KEY----.
   • Certificate Chain: Upload or import a certificate chain.
     Note:

     • Only CRT and PEM formats are supported.
     • The certificate content starts with ----BEGIN CERTIFICATE---- and ends with ----END CERTIFICATE----.
   • HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.

   
   
   

5. Review the configuration and click OK.
6. After the above operations, the Cloud platform will automatically refresh and you can access the UI via the HTTPS protocol.
   Note: After configuring the certificate, the system will establish a new session, and you will need to log in to the UI interface again.

In this section, you will learn how to import a system self-signed certificate via the UI interface.

1. Log in to ZStack Cloud.
2. Choose Settings > System and Security > Certificate Management.
3. On the Certificate Management page, click Add Certificate.
4. On the Import Certificate page, set the following parameters:
   • Import Mode: Choose System Self-signed Certificate.
   • Duration: Specify a validation duration for the system self-signed certificate. Valid values: 3 months, 1 year, 3 years, 5 years, and 10 years. By default, 10 years is selected.
   • HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.
   • Custom Certificate Information: Optional. If enabled, you can customize your self-signed certificate information.
     • Common Name: Optional. Set a common name. By default, the common name is localhost.

       The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

     • Organization Name: Optional. Set a name for your organization. By default, the organization name is localhost.

       The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

     • Organization Unit Name: Optional. Set a name for your organization unit.

       The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

     • Country/Region Name: The country/region name can only be set as CN.
     • State/Province Name: Optional. Set the state or province name.

       The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

     • Locality Name: Optional. Set a city name.

       The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

     • Email Address: Optional. Set an email address.

   
   
   

5. Review the configuration and click OK.
6. After the above operations, the Cloud platform will automatically refresh and the UI can be accessed via the HTTPS protocol.
   Note: After configuring the certificate, the system will establish a new session, and you will need to log in to the UI interface again.

In this section, you will learn how to how to update a certificate via the UI interface.

1. Log in to ZStack Cloud.
2. Choose Settings > System and Security > Certificate Management.
3. On the Certificate Management page, click Update Certificate

   
   
   

4. Review the configuration and click OK to update the certificate.
   Note: The system will detect the current certificate path and write the certificate information to that path when updating the certificate.