Managing certificates

You can request an AWS certificate or import your own certificates and associate them with your environment(s) (Live, UAT, and Integration) via the Magnolia Cloud Cockpit.

Here, we explain how to manage certificates and associate domains to your Magnolia environments via the Cockpit.

Prerequisites

  • You must have access to the Cockpit.

  • You must be able to set up or coordinate the DNS and domain information needed for the Cockpit.

Handle certificates

The instructions provided here detail how to request or import a certificate for the first time.

You cannot amend existing certificates with AWS Certificate Manager (ACM).

To add additional SANs:

  1. Create a new certificate.

  2. Change the association as desired.

  3. Remove the previous (now invalid) certificate.

See ACM Best Practices for more information.

  • Request certificate

  • Import certificate

  1. Log in to the Cockpit.

  2. Navigate to Your-Subscription > Manage certificates.

  3. Select the Certificates tab.

  4. Select Request certificate.

  5. Enter your Domain name.

    There is a maximum of 25 certificates per subscription and each certificate can contain a maximum of 30 domain names (including SANs).
  6. Enter any Subject Alternative Names (SANs) if applicable.

  7. Choose your desired Validation method.

  8. Select Request to complete the certificate request.


  1. Log in to the Cockpit.

  2. Navigate to Your-Subscription > Manage certificates.

  3. Select the Certificates tab.

  4. Select Import certificate.

  5. In the pop up window:

    1. Enter your Certificate body.

    2. Enter your Certificate private key.

    3. Enter your Certificate chain if applicable.

      You can only import one certificate at at time. If you have any issues, see Managing server certificates in IAM from AWS to troubleshoot.
  1. Select Next.

  2. Review the certificate information to ensure it is correct.

  3. Select Import.


Handle the CNAME record

After you have requested your certificate, be sure that you copy the Name and Value under Configuration Information for your pending certificate and add that to your DNS configuration.

This is needed to validate ownership of the domain.
The procedure for adding CNAMEs depends on your DNS service provider.


Reimport certificates

If you need to reimport a certificate (for example, to renew a certificate), you can do this via the Cockpit.

Certain conditions must be met as per AWS standards.
  1. Log in to the Cockpit.

  2. Navigate to Your-Subscription > Manage certificates.

  3. Find the certificate you wish to reimport.

  4. Select the Reimport certificate button.

    reimport cert step1
  5. In the pop up window:

    1. Enter your Certificate body.

    2. Enter your Certificate private key.

    3. Enter your Certificate chain if applicable.

  6. Select Next.

  7. Review the certificate information to ensure it is correct.

  8. Select Import.

Conditions

The following conditions apply when you reimport a certificate:

  • You can add or remove domain names.

  • You cannot remove all of the domain names from a certificate.

  • You can add new Key Usage extensions but existing extension values cannot be removed.

  • You can add new Extended Key Usage extensions but existing extension values cannot be removed.

  • The key type and size cannot be changed.

See AWS Reimport a Certificate for more in-depth information.

Associate certificates to environments

  1. Log in to the Cockpit.

  2. Navigate to Your-Subscription > Manage certificates.

  3. Select the Associate certificate tab.

  4. Select the environment to which you wish to associate the certificate (e.g., Live, UAT, Integration).

    You can associate certificates to multiple environments.
  5. Choose your verified domain from the dropdown list.

  6. Select Associate.

Helpers

Action Notes

Refresh certificates

Select the Refresh button.

Filter data

filter icon in UI Click the filter icon to display available filters.

Delete certificate

delete icon Click the delete icon to delete certificates.

Unassociate certificate

Select Unassociate from your list of associated certificates.

Feedback