Certificates

A certificate stores TLS material (certificate, private key, and optional CA chain) for database SSL. Attach a certificate to a cluster from the cluster detail page.

In the console

Choose Encryption, Certificates.

To create a certificate

  1. Choose Encryption, Certificates, then create a certificate.
  2. For Name, enter a name.
  3. For Certificate, paste the PEM certificate.
  4. For Private Key, paste the PEM private key.
  5. (Optional) For CA Chain, paste the CA chain PEM.
  6. (Optional) Select Set as default certificate.
  7. Choose Save.

Fields

Field Description
Name Display name for the certificate
Certificate Server (or leaf) certificate in PEM format
Private Key Matching private key in PEM format
CA Chain Optional intermediate/root CA chain in PEM format
Default When set, new database clusters automatically receive this certificate. Only one default is allowed

Default certificate

If an account has a default certificate, myStack attaches it when you create a new database cluster. Setting a certificate as default fails if another default already exists—clear the existing default first.

To attach a certificate to a cluster

  1. Open the cluster.
  2. In Certificate, choose a certificate (or No certificate to remove one).
  3. Choose Save.

A cluster can have only one certificate at a time.

To delete a certificate

  1. Remove the certificate from any clusters that use it.
  2. Open the certificate and delete it.
Important You cannot delete a certificate that is still attached to one or more databases.

Related