Overview
The default validity period for SSL certificates is 1 year. You should renew and update the certificate within 30 calendar days before its expiration. Tencent Cloud certificate hosting service can help you automatically update the certificate (by deploying the new certificate to the Tencent Cloud product associated with the old certificate) after detecting the renewed certificate (or specified certificate). You do not need to update manually and your certificate maintenance time are saved.
Note:
Free certificates applied or official certificates purchased on Tencent Cloud can be hosted.
If the old certificate is not associated with cloud resources, the hosting service is not needed.
If your SSL certificate is only deployed on Tencent Cloud resources, enabling cloud resources hosting will automatically update the new certificate to the cloud resources. If your certificate is deployed on non-Tencent Cloud resources, even if the hosting service is enabled for your SSL certificate, you still need to manually install the new certificate on your web services (to replace the old certificate).
Strengths
Automated SSL certificate management can be achieved by enabling auto-renewal and certificate hosting (OV/EV certificates still require additional organization information verification).
In addition to renewed certificates, any certificate can also be manually specified, and it can be automatically replaced and deployed to cloud resources before the old certificate expires.
Operation Guide
1. Log in to the Tencent Cloud SSL Certificates console and go to the Certificate Hosting page. 2. Click Add hosting, select the certificate to be hosted, and check the host cloud resources.
Select Certificate: Select the certificate to be hosted.
Host Cloud Resources: Before the old certificate expires, the renewed certificate (or specified certificate) will replace the old certificate on the selected cloud resources. If the old certificate is not associated with any cloud resources, hosting is not needed.
Resource Replacement Time: Set the time for automatic replacement with the new certificate. (Make sure the new certificate is issued before replacement. Otherwise, hosting will fail.) The remaining time before the old certificate expires should be longer than the time before certificate replacement. (For example, if the certificate expires in 7 days, you cannot check the option of 25 days before the certificate expires.)
Message Settings: The message reminder with hosting-related information will be sent through emails, Message Center, and SMS. (It is recommended to enable it. If you have many certificates, you can manually disable the message reminder in the settings.)
3. Select the associated certificate.
3.1 By default, automatically renewed SSL certificates are selected for hosting. If the new certificate is newly-purchased, you can click in the Associate certificate column to specify the new certificate. 3.2 Select the newly-purchased certificate in the pop-up window, and click Save.
Warning:
Ensure that the specified certificate matches the domain name bound to both the old and new certificates. If they do not match, it may directly affect the business after replacing the cloud resources.
