This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

How-to guides

The user can enter the required information for the Certificate Manager service through the Samsung Cloud Platform Console, select detailed options, and create the service.

Certificate Manager Create

You can create and use the Certificate Manager service from the Samsung Cloud Platform Console.

To request the creation of a Certificate Manager service, follow the steps below.

  1. All Services > Security > Certificate Manager Click the menu. Service Home page will be opened.
  2. Click the Create Certificate Manager button on the Service Home page. You will be taken to the Create Certificate Manager page.
  3. Certificate Manager creation On the page, enter the information required to create the service, and select detailed options.
    • Service Information Input area: enter or select the required information.
      Category
      Required
      Detailed description
      Certificate NameRequiredEnter the name of the Certificate Manager to use
      • Enter within 3-30 characters, including English letters, numbers, and special characters (-, _, .)
      • Cannot be the same as an existing name in use
      TypeRequiredSelect the Certificate Manager type to use
      • User Certificate: Public certificate issued by a Certificate Authority (CA)
      • Self-issued Certificate: Certificate self-issued (Self-signed) by Samsung Cloud Platform
        • Since it is relatively insecure, it is recommended for development/testing use.
      User Certificate > Certificate BodyRequiredEnter Server (Leaf) certificate information
      • Only one certificate can be entered in the certificate body
      • Enter the entire content including the lines from —–BEGIN CERTIFICATE—– to —–END CERTIFICATE—–
      User Certificate > Private KeyRequiredEnter private key information
      • Private Key supports RSA encryption method
      • Private Key can be entered in unencrypted PEM format
      • Enter the entire content including the lines from —–BEGIN RSA PRIVATE KEY—– to —–END RSA PRIVATE KEY—-
      User Certificate > Certificate ChainRequiredEnter Certificate Chain information
      • Can be omitted when using a private certificate
      • Enter the Certificate Chain in order: Intermediate (Subordinate) certificate → Root certificate
      • Public certificates must provide Certificate Chain information; only when there is no intermediate certificate (Chain CA) should use be disabled
      • Enter the entire content including the lines from —–BEGIN CERTIFICATE—– to —–END CERTIFICATE—–
      • If there are multiple Intermediate (Subordinate) certificates, enter each certificate’s content in order
      User Certificate > Certificate Validity CheckRequiredValidate the entered certificate’s validity
      Self-issued certificate > Common NameRequiredEnter the domain name to be used for the certificate
      Self-issued certificate > Organization UnitRequiredEnter the organization and department that will use the certificate
      Self-issued Certificate > Start DateRequiredEnter the certificate usage start date (creation date)
      Self-issued certificate > Expiration dateRequiredEnter certificate expiration date
      Expiration AlertSelectSet whether to receive alerts before certificate expiration
      • Use can be selected to enable expiration alerts
      • If expiration alerts are set, an email is sent to recipients 45 days/30 days/15 days/7 days/1 day before certificate expiration
      Expiration Alert > Notification RecipientRequiredSelect notification recipient when using expiration alert
      • Enter user name in the search area to select notification recipient
      • Up to 100 can be registered
      Table. Certificate Manager Service Information Input Items
      Reference
      • If the entered certificate information is not valid, you cannot create the Certificate Manager service.
      • If the Private Key is encrypted, enter the decrypted value using the openssl command below.
        • openssl rsa -in [Encrypted Private Key File name] -out [Decrypted Private Key File name]
      • For certificates issued via Let’s Encrypt, even if there is a previously issued Certificate Chain value, extract it again and input.
    • Additional Information Input Enter or select the required information in the area.
      Category
      Whether required
      Detailed description
      TagSelectAdd Tag
      • Up to 50 can be added per resource
      • After clicking the Add Tag button, enter or select Key, Value values
      Table. Certificate Manager additional information input items
  4. Verify the entered service information and additional information, and click the Complete button.
    • Once creation is complete, check the created resource on the Certificate Manager List page.
      Reference

      To create a Load Balancer to use in the Certificate Manager service, click Load Balancer creation in Service Home.

Certificate Manager View Detailed Information

Certificate Manager service can view and edit the full resource list and detailed information. Certificate Manager Details page consists of Details, Connected Resources, Tags, Activity History tabs.

To view detailed information of Certificate Manager, follow the steps below.

  1. All Services > Security > Certificate Manager Click the menu. Go to the Certificate Manager’s Service Home page.
  2. On the Service Home page, click the Certificate Manager menu. Navigate to the Certificate Manager list page.
  3. Click the resource to view detailed information on the Certificate Manager List page. You will be taken to the Certificate Manager Details page.
  • Certificate Manager Details page displays the status information and detailed information of Certificate Manager, and consists of Details, Connected Resources, Tags, Activity History tabs.
    CategoryDetailed description
    Service StatusCertificate Manager Status
    • Creating: Creating
    • Active/Valid: Certificate valid
    • Expired: Certificate expired
    • Editing: Editing settings
    • Terminating: Terminating
    • Error: Certificate error
    Service terminationButton to cancel Certificate Manager
    Table. Status Information and Additional Functions

Detailed Information

Certificate Manager list page, you can view detailed information of the selected resource and, if necessary, edit the information.

CategoryDetailed description
serviceservice name
Resource TypeResource Type
SRNUnique resource ID in Samsung Cloud Platform
Resource NameResource Name
Resource IDUnique resource ID in the service
CreatorUser who created the service
Creation DateTimeDate and time the service was created
EditorUser who modified the service information
Modification DateTimeDate and time when the service information was modified
Certificate NameCertificate Manager Certificate Name
TypeCertificate type information
Certificate InformationDetailed information of the selected certificate type
  • User Certificate When selected, display certificate information
  • Self-issued Certificate When selected, display Commom Name, Organization Unit, start date, expiration date
Expiration NotificationCertificate expiration notification settings details
  • Edit button can be clicked to modify usage of expiration notifications and notification recipients
Table. Certificate Manager detailed information items

Connected Resources

You can view the connected Load Balancer information on the Certificate Manager list page.

CategoryDetailed description
Load BalancerLoad Balancer resource ID connected to the service
ListenerListener resource name ID connected to the service
  • Click the name to display the detail information window
StatusDisplay the status of the Listener connected to the service
Table. Certificate Manager's Connected Resources tab items

Tag

Certificate Manager list page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

CategoryDetailed description
Tag ListTag List
  • You can check the Key and Value information of tags
  • Up to 50 tags can be added per resource
  • When entering tags, search and select from the previously created Key and Value list
Table. Certificate Manager tag tab items

Work History

Certificate Manager List page, you can view the operation history of the selected resource.

CategoryDetailed description
Work History ListResource Change History
  • Work details, work date and time, resource type, resource name, work result, worker information can be checked
  • When you click the corresponding resource in the Work History List list, the Work History Details popup opens
Table. Certificate Manager operation history tab detailed information items

Certificate Manager Cancel

You can apply for termination of the Certificate Manager service from the Samsung Cloud Platform Console.

Caution
If there are resources connected to the Certificate Manager service, you cannot cancel it. To cancel the service, first delete the connected resources.

To request termination of the Certificate Manager service, follow the steps below.

  1. All Services > Security > Certificate Manager Click the menu. Go to the Service Home page of Certificate Manager.
  2. Click the Certificate Manager menu on the Service Home page. Navigate to the Certificate Manager list page.
  3. Certificate Manager List Click the resource to view detailed information on the page. Certificate Manager Details You will be taken to the page.
  4. Click the Service Termination button on the Certificate Manager Details page.
  5. Once termination is complete, check the service termination status in the Certificate Manager list.

1 - Chain Certificate Extraction

The user can extract and enter the Certificate Chain certificate to be used when creating the Certificate Manager service.

Extract Certificate Chain

You can extract the Certificate Chain certificate value required when creating a Certificate Manager.

Caution

The Certificate Chain consists of Intermediate (Subordinate) certificates issued by a public certification authority to the Root certificate.

  • Even if you have an existing Certificate Chain value, it is recommended to re-extract and register the Intermediate (Subordinate) certificate to the Root certificate through the Certificate Body file.

Intermediate (Subordinate) Certificate Value Extraction

You can extract the Intermediate (Subordinate) certificate of the Certificate Chain required when registering a user certificate.

Reference
If there are more than two Intermediate(Subordinate) certificates, extract the values for each certificate.

To extract the Intermediate(Subordinate) certificate value, follow these steps.

  1. Run the crt file format certificate file on PC. The certificate window appears.
  2. Click the Certificate Path tab in the Certificate window.
    • If it is in PEM file format, change the file format to crt.
  3. Click the certificate under the Root and click Certificate View.
  4. Click the Details tab and move, then click Copy to file.
  5. When the Certificate Export Wizard runs, click Next.
  6. Select Base 64 encoded X.509(.CER)(S) as the format to use and click Next.
  7. Click Browse to select the path where you want to save the file, and then click Next.
  8. Click Finish. The Certificate Export Wizard is complete.
  9. Open the exported file in TEXT file format and check the value.
    • The extracted certificate value must have —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—- items at the beginning and end.

Root Certificate Value Extraction

You can extract the Root certificate of the Certificate Chain required when registering a user certificate.

To extract the Root certificate value, follow these steps.

  1. Run the crt file format certificate file on PC. The certificate window appears.
  2. Click the Certificate Path tab in the Certificate window.
    • If it is in PEM file format, change the file format to crt.
  3. Click the topmost Root certificate and click Certificate View.
  4. Click the Details tab and move, then click Copy to file.
  5. When the Certificate Export Wizard runs, click Next.
  6. Select Base 64 encoded X.509(.CER)(S) as the format to use and click Next.
  7. Click Browse to select the path where you want to save the file, and then click Next.
  8. Click Finish. The Certificate Export Wizard is complete.
  9. Open the exported file in TEXT file format and check the value.
    • The extracted certificate value must have —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—- items at the beginning and end.

Input Certificate Chain value

This explains how to enter the extracted Intermediate (Subordinate) certificate and Root certificate values into the Certificate Chain item when creating a Certificate Manager.

Reference
For detailed information on creating a Certificate Manager, please refer to Creating a Certificate Manager.

To enter the Intermediate (Subordinate) certificate and Root certificate values in the Certificate Chain item, follow these procedures.

  1. Intermediate (Subordinate) certificate file and Root certificate file should be run in text file format.
  2. Intermediate (Subordinate) certificate file values should be copied in their entirety.
  3. Certicafate Manager creation page’s Certificate Chain input area, please paste.
    • Include the certificate value, including —–BEGIN CERTIFICATE—– at the beginning and —–END CERTIFICATE—- at the end, and paste it.
  4. Copy the entire value of the Root certificate file.
  5. Paste it into the Certificate Chain input area of the Certicafate Manager Creation page.
    • Includes the —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—- at the start and end of the certificate value and paste it.
    • Intermediate (Subordinate) certificate’s below line will be pasted with the Root certificate value.