UI Configuration Method

The following sections delve into the HTTPS configuration on the Cloud. In the following sections, you will learn how to:
  • Add a third-party certificate
  • Add a system self-signed certificate
  • Update certificate
  • Switch back to HTTP to log in to the UI

Add a Third-Party Certificate

In this section, you will learn how to import a third-party certificate via the UI interface.

You will need the following resources or permissions to proceed with this section:
  • A latest ZStack Cloud environment.
  • A admin or platform administrator permission to configure certificates.
  • A valid certificate issued by the commercial CA.
  • Certificates and certificate chains are only supported in CRT or PEM format, and private keys are only supported in KEY or PEM format.
    Note: If your certificate does not meet the format requirements, please convert the format on your own.
  1. Log in to ZStack Cloud.
  2. Choose Settings > System and Security > Certificate Management.
  3. On the Certificate Management page, click Add Certificate.
  4. On the Import Certificate page, set the following parameters:
    • Import Mode: Choose Third-party Certificate.
    • Certificate Document: Upload or import a certificate.
      Note:
      • Only CRT and PEM formats are supported.
      • The certificate content starts with ----BEGIN CERTIFICATE---- and ends with ----END CERTIFICATE----.
    • Private Key: Upload or import a private key.
      Note:
      • Only KEY and PEM formats are supported.
      • The private key content starts with ----BEGIN (RSAIEC) PRIVATE KEY---- and ends with ----END (RSAIEC) PRIVATE KEY----.
    • Certificate Chain: Upload or import a certificate chain.
      Note:
      • Only CRT and PEM formats are supported.
      • The certificate content starts with ----BEGIN CERTIFICATE---- and ends with ----END CERTIFICATE----.
    • HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.
    Figure 1. Add Third-Party Certificate


  5. Review the configuration and click OK.
  6. After the above operations, the Cloud platform will automatically refresh and you can access the UI via the HTTPS protocol.
    Note: After configuring the certificate, the system will establish a new session, and you will need to log in to the UI interface again.

Add a System Self-Signed Certificate

In this section, you will learn how to import a system self-signed certificate via the UI interface.

You will need the following resources or permissions to proceed with this section:
  • A latest ZStack Cloud environment.
  • A admin or platform administrator permission to configure certificates.
  1. Log in to ZStack Cloud.
  2. Choose Settings > System and Security > Certificate Management.
  3. On the Certificate Management page, click Add Certificate.
  4. On the Import Certificate page, set the following parameters:
    • Import Mode: Choose System Self-signed Certificate.
    • Duration: Specify a validation duration for the system self-signed certificate. Valid values: 3 months, 1 year, 3 years, 5 years, and 10 years. By default, 10 years is selected.
    • HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.
    • Custom Certificate Information: Optional. If enabled, you can customize your self-signed certificate information.
      • Common Name: Optional. Set a common name. By default, the common name is localhost.

        The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

      • Organization Name: Optional. Set a name for your organization. By default, the organization name is localhost.

        The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

      • Organization Unit Name: Optional. Set a name for your organization unit.

        The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

      • Country/Region Name: The country/region name can only be set as CN.
      • State/Province Name: Optional. Set the state or province name.

        The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

      • Locality Name: Optional. Set a city name.

        The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

      • Email Address: Optional. Set an email address.
    Figure 1. Add System Self-Signed Certificate


  5. Review the configuration and click OK.
  6. After the above operations, the Cloud platform will automatically refresh and the UI can be accessed via the HTTPS protocol.
    Note: After configuring the certificate, the system will establish a new session, and you will need to log in to the UI interface again.

Update Certificate

In this section, you will learn how to how to update a certificate via the UI interface.

You will need the following resources or permissions to proceed with this section:
  • A latest ZStack Cloud environment.
  • A admin or platform administrator permission to configure certificates.
  • The added certificate has changed and requires updates.
  1. Log in to ZStack Cloud.
  2. Choose Settings > System and Security > Certificate Management.
  3. On the Certificate Management page, click Update Certificate
    Figure 1. Update Certificate


  4. Review the configuration and click OK to update the certificate.
    Note: The system will detect the current certificate path and write the certificate information to that path when updating the certificate.

Back to Top

Download

Already filled the basic info?Click here.

Enter at least 2 characters.
Invalid mobile number.
Enter at least 4 characters.
Invalid email address.
Wrong code. Try again. Send Code Resend Code (60s)

An email with a verification code will be sent to you. Make sure the address you provided is valid and correct.

同意 不同意

I have read and concur with the Site TermsPrivacy PolicyRules and Conventions on User Management of ZStack Cloud

Download

Not filled the basic info yet? Click here.

Invalid email address or mobile number.
同意 不同意

I have read and concur with the Site TermsPrivacy PolicyRules and Conventions on User Management of ZStack Cloud

Email Us

contact@zstack.io
ZStack Training and Certification
Enter at least 2 characters.
Invalid mobile number.
Enter at least 4 characters.
Invalid email address.
Wrong code. Try again. Send Code Resend Code (60s)

同意 不同意

I have read and concur with the Site TermsPrivacy PolicyRules and Conventions on User Management of ZStack Cloud

Email Us

contact@zstack.io
Request Trial
Enter at least 2 characters.
Invalid mobile number.
Enter at least 4 characters.
Invalid email address.
Wrong code. Try again. Send Code Resend Code (60s)

同意 不同意

I have read and concur with the Site TermsPrivacy PolicyRules and Conventions on User Management of ZStack Cloud

Email Us

contact@zstack.io

The download link is sent to your email address.

If you don't see it, check your spam folder, subscription folder, or AD folder. After receiving the email, click the URL to download the documentation.

The download link is sent to your email address.

If you don't see it, check your spam folder, subscription folder, or AD folder.
Or click on the URL below. (For Internet Explorer, right-click the URL and save it.)

Thank you for using ZStack products and services.

Submit successfully.

We'll connect soon.

Thank you for using ZStack products and services.