Manage SSL certificates managing-ssl-certificates
Learn how to use Cloud Manager to check the status of your SSL certificates and how to edit, replace, update, and delete them.
Check the status of SSL certificates checking-status-an-ssl-certificate
Cloud Manager gives an overview of the status of all certificates for your program.
- Log into Cloud Manager at my.cloudmanager.adobe.com and select the appropriate program.
- On the My Programs console, select the program.
- In the upper-left corner of the page, click
- Under the Services heading, click
The SSL Certificates page provides the status of your SSL certificates.
• Ensure that you have a plan to renew your certificate and replace it by way of the Cloud Manager user interface to avoid possible site access or outages.
• Cloud Manager sends regular notifications in the UI to alert you of an impending certificate expiration.
See Update an expired customer managed SSL certificate or Delete an SSL certificate.
Update an expired customer managed SSL certificate update-ssl-certificate
When a customer managed certificate expires any domains that are in use with the expired certificate no longer work. Updating your certificates ensures that your domain continues to work as desired.
A user must be a member of the Business Owner or Deployment Manager role to complete this task.
To update an expired customer managed SSL certificate:
-
Log into Cloud Manager at my.cloudmanager.adobe.com and select the appropriate program.
-
On the My Programs console, select the program.
-
In the upper-left corner of the page, click
-
Under the Services heading, click
-
In the row of the expired customer managed certificate that you want to update, click https://spectrum.adobe.com/static/icons/workflow_18/Smock_More_18_N.svg at the far right, then click View and Update.
-
In the View & Update SSL Certificate dialog box, do the following:
- (Optional) In the Certificate name field, type a new name.
- In the Certificate field, paste the new certificate contents key.
- In the Private key field, update this field only if you made changes to the certificate.
- In the Certificate chain field (or chain of trust), paste the certificate chain.
-
Click Update to save your changes and have them applied automatically.
Replace an expired customer managed SSL certificate replace-ssl-certificate
Follow the same steps that are described in Update an expired SSL certificate to replace an expired, customer managed SSL certificate.
Rename an Adobe managed SSL certificate (#rename-an-ssl-certificate)
The following are a few reasons why you might want to rename an SSL certificate:
- Improved organization: Renaming the certificate can help clarify its purpose, such as identifying which environment (for example, staging, production) or domain it is for.
- Avoiding confusion: If you are managing multiple certificates, a clear, descriptive name can help prevent mistakes, like applying the wrong certificate to the wrong domain.
- Compliance and auditing: Properly named certificates may be easier to track for security and audit purposes.
To rename an Adobe managed SSL certificate:
-
Log into Cloud Manager at my.cloudmanager.adobe.com and select the appropriate program.
-
On the My Programs console, select the program.
-
In the upper-left corner of the page, click
-
Under the Services heading, click
-
On the SSL Certificates page, click
-
In the drop-down menu, click Rename.
-
In the Rename DV Certificate dialog box, in the Certificate name text field, enter the new name of the certificate.
-
Click Rename.
Delete an SSL certificate deleting-an-ssl-certificate
Deleting Adobe managed or customer managed SSL certificates from Cloud Manager is a permanent action that cannot be undone. As a best practice, Adobe recommends that you save SSL files locally before deleting them in Cloud Manager.
A user must be a member of the Business Owner or Deployment Manager role to complete this task.
To delete an SSL certificate:
-
Log into Cloud Manager at my.cloudmanager.adobe.com and select the appropriate program.
-
On the My Programs console, select the program.
-
In the upper-left corner of the page, click
-
Under the Services heading, click
-
On the SSL Certificates page, in the table row of the certificate you want to delete, click
If Delete has an information icon as seen in the following image, see the Note above.
-
In the Delete SSL Certificate dialog box, click Delete to confirm the deletion.
-
Run the pipeline to undeploy the deleted certificate.
Pre-existing CDN configurations pre-existing-cdn
If you already have a CDN configuration for your SSL certificate, the SSL Certificates page displays an informative message. It encourages you to add these configurations through the UI so they are visible and manageable in Cloud Manager.
The message disappears after all pre-existing environment configurations are migrated using the UI. It may take one to two business days for the message to disappear.
See Add an SSL certificate for more details.
A similar message is also provided on the IP Allow List and the Environments pages for environments that have pre-existing CDN configurations for IP Allow Lists or custom domain names.