The first step in obtaining an SSL certificate to use with Cloud Platform is to generate a Certificate Signing Request, or CSR. The CSR contains information about your organization and website that a Certificate Authority can use to generate the appropriate SSL certificate for your website.
You cannot generate a CSR for an Acquia default domain.
If you already have an SSL certificate, or if you choose to generate a CSR some other way (such as using the command line), you can skip this page. However, only CSRs generated using the Cloud Platform user interface are managed and displayed on the SSL page.
To generate a CSR in the Cloud Platform user interface:
- Sign in to the Cloud Platform user interface as a user with the necessary permissions.
Select your environment and click SSL.
Click Generate CSR.
The Generate certificate signing request page is displayed.
- Enter the following information:
- Country: Use the standard two-letter ISO country code for the country where your organization is located. For example, US or ZA
- State, province, or region: Use the full state or province name, without abbreviation. For example, California, not CA, and New Brunswick, not NB
- Locality: Use the city or town name, without abbreviation
- Organization or company: Use the full legal name of the organization or company that owns the domain name
- Department or organizational unit: (Optional) Use the name of the department or organizational unit for the domain
- Common name (domain name): Enter the fully qualified domain name that visitors use to reach your website, without the
http://orhttps://protocol element. For example, to securehttps://www.example.com, enterwww.example.comor*.example.comfor a wildcard certificate - Subject alternative name(s): (Optional) Enter additional domain names, separated by commas, such as
www.example.net, www.example.org. Adding additional domain names will generate a CSR appropriate for a UCC (Unified Communications Certificate) SSL certificate
- Click Generate CSR.
Cloud Platform generates a CSR.
Using a CSR to obtain an SSL certificate
All the CSRs that have been generated for an environment are listed on the SSL page. You need to provide the CSR in encoded format to your SSL certificate vendor in order to obtain an SSL certificate. To get the CSR in encoded format:
- Click SSL.
- In the Certificate signing requests section, click View to view the CSR.
For Certificate Request, click Show.
Cloud Platform displays the encoded CSR.
- Copy the encoded CSR and provide it to your SSL certificate vendor in the vendor’s certificate purchase process.
Next step
After you generate and copy the CSR, use it to obtain an SSL certificate.