DocsKnowledge BaseAPI Explorer
Documentation›Explore more›ZStack ZSphere›User GuideZVF
Document navigation

SSL Certificate

SSL Certificate is used to maintain the HTTPS access certificate for the ZSphere UI. Administrators can import a third-party certificate, import a system self-signed certificate, update an existing certificate, and switch to HTTP login for the UI in specific scenarios.

Import a Third-Party Certificate

Before you begin

  • You have deployed the latest ZSphere environment. For a dual-management node environment, ensure that each management node is working properly.
  • You need admin permissions to configure the certificates.
  • You hold a valid commercial CA-issued certificate.
  • Certificate files and certificate chains are supported in CTR or PEM format only. Private keys for certificates must be in KEY or PEM format.
    Note: If your certificate does not meet these format requirements, convert it accordingly.

Procedure

  1. In the navigation pane, choose System Management > SSL Certificate.
  2. On the SSL Certificate page, click Import Certificate.
  3. In the Import Certificate dialog, configure the following options:
    Option Description
    Import Mode Select Third-party Certificate.
    Certificate File Import or enter the certificate public key.
    Note:
    • Only CTR and PEM formats are supported.
    • The certificate content must begin with ----BEGIN CERTIFICATE---- and end with ----END CERTIFICATE----.
    Certificate Private Key Import or enter the certificate private key.
    Note:
    • Only KEY and PEM formats are supported.
    • The private key content must begin with ----BEGIN (RSA/EC) PRIVATE KEY---- and end with ----END (RSA/EC) PRIVATE KEY----.
    Certificate Chain Import or enter the certificate chain.
    Note:
    • Only CTR and PEM formats are supported.
    • The certificate chain content must begin with ----BEGIN CERTIFICATE---- and end with ----END CERTIFICATE----.
    HTTP Redirection Optional, enabled by default. When enabled, the system automatically redirects requests from port 80 of the HTTP address to port 443 of the HTTPS address.
  4. Review the certificate information and click OK.

Results

After successfully importing the third-party certificate, the system will re-establish the session and reconnect to the UI management interface through port 443 of the HTTPS protocol.

Import a System Self-Signed Certificate

Before you begin

  • The latest ZSphere environment has been deployed. In a dual-management-node environment, make sure each management node works properly.
  • You need admin permissions to configure certificates.

Procedure

  1. In the navigation pane, choose System Management > SSL Certificate.
  2. On the SSL Certificate page, click Import Certificate.
  3. In the Import Certificate dialog, configure the following options:
    Option Description
    Import Mode Select System Self-Signed Certificate.
    Validity Period Options include 3 months, 1 year, 3 years, 5 years, or 10 years. The default is 3 years.
    HTTP Redirection Optional, enabled by default. When enabled, the system automatically redirects requests from port 80 of the HTTP address to port 443 of the HTTPS address.
    Custom Information Optional, disabled by default. When enabled, you can customize the system-signed certificate information.
    Custom Information
    Option Description
    Common Name (CN) Optional. Set the common name. The default is localhost. The length should be 1 to 64 characters. Only uppercase and lowercase English letters, numbers, and the following special characters are supported: ~`@#$%^&*()-_+={}[]|:;'<>.?/
    Organization (O) Optional. Set the organization name. The default is localhost. The length should be 1 to 64 characters. Only uppercase and lowercase English letters, numbers, and the following special characters are supported: ~`@#$%^&*()-_+={}[]|:;'<>.?/
    Organizational Unit (OU) Optional. Set the department. The length should be 1 to 64 characters. Only uppercase and lowercase English letters, numbers, and the following special characters are supported: ~`@#$%^&*()-_+={}[]|:;'<>.?/
    Country/Region (C) Optional. Set the country/region. Only CN is supported.
    State/Province (S) Optional. Set the state/province. The length should be 1 to 128 characters. Chinese characters, uppercase and lowercase English letters, numbers, and the following special characters are supported: ~`@#$%^&*()-_+={}[]|:;'<>.?/
    Locality (L) Optional. Set the city. The length should be 1 to 128 characters. Chinese characters, uppercase and lowercase English letters, numbers, and the following special characters are supported: ~`@#$%^&*()-_+={}[]|:;'<>.?/
    Email Address Optional. Set the email address.
  4. Review the certificate information and click OK.

Results

After successfully importing the system-signed certificate, the system will re-establish the session and reconnect to the UI management interface through port 443 of the HTTPS protocol.

Update a Certificate

Before you begin

  • The latest ZSphere environment has been deployed. In a dual-management-node environment, make sure each management node works properly.
  • You need admin permissions to configure certificates.
  • If an added certificate has changed or is nearing its expiration date, you need to update the certificate information promptly.

Procedure

  1. In the navigation pane, choose System Management > SSL Certificate.
  2. In the SSL Certificate page, click Import New Certificate.
  3. In the Import Certificate dialog, update the certificate configuration information.
    Note: When updating a certificate, the system checks the current certificate path and writes the certificate information to that path.
  4. Review the certificate information and click OK.

Results

After successfully updating the certificate, you can continue to access the UI management interface through port 443 of the HTTPS protocol.

Switch to HTTP Login for the UI

Before you begin

  • The latest ZSphere environment has been deployed. In a dual-management-node environment, make sure each management node works properly.
  • You need admin permissions to configure certificates.
  • You have configured the SSL certificate.

Procedure

  1. In the navigation pane, choose System Management > SSL Certificate.
  2. On the SSL Certificate page, click Switch to HTTP.
  3. In the confirmation dialog, review and confirm the risk warning information.

Results

After successfully switching to HTTP protocol for accessing the UI management interface, the system will re-establish the session and reconnect to the UI management interface through port 80 of the HTTP protocol.
PreviousPlatform Access SecurityNextAccessKey Management
User Guide | ZStack ZSphere · ZVF | ZStack Resource Center