Next-generation platform

Uploading a domain certificate

To set a custom hostname, you can upload a domain certificate in Self Service and then apply the certificate and the key to your environment. You can upload only one domain certificate and can use only one custom hostname in addition to the default hostname.

Before you begin

You must work with your registrar to purchase a certificate that represents your domain. Your registrar provides you the details that describe the process of creating a private key and requesting a certificate. After you have received a key and a certificate, your Organization Administrator can upload the certificate by using Self Service.

You must have the Organization Administrator role to upload a domain certificate.

About this task

A certificate is valid for one year. You can view the expiry date of the certificate under the Certificates tab. The Organization Administrator receives a summary of all the certificates that are going to expire in a month or in a week. When your certificate is about to expire, you must generate a new certificate manually and use the new certificate.

The following table lists the actions for the domain certificates that a user with the Organization Administrator role can perform.
Role Actions
Organization Administrator
  • View domain certificates.
  • Upload domain certificates.
  • Apply domain certificates.

Procedure

To upload a certificate, complete the following steps.

  1. Access Self Service with your IBMid.
  2. From the Self Service menu, click Environments.
  3. From the list of environments, select an environment.
  4. In the Certificates tab, click Inbound.
  5. Select the certificate type as Domain certificates.
  6. Click Upload certificate.
  7. In the Add certificate page, enter the Alias, and the Domain name, certificate in the PEM format, Private key of the certificate in the PEM format, and the Certificate chain in the PEM format.
    Important: Ensure to use an unencrypted PKCS8 key when uploading a domain certificate.
  8. Optionally, you can click Upload keystore to upload a .p12 or a .pfx file.
  9. If you want to add more certificates in the same chain, click Add another certificate to the chain.
  10. Click Add.

What to do next

You must click Apply changes to apply the certificate and then can use the custom hostname.

The URLs under the Environments tab to access the applications are updated with the custom hostname.