Oracle Cloud Infrastructure Documentation

Adding a Load Balancer Certificate

On Compute Cloud@Customer, you can add a public SSL certificate to use with a load balancer.

Optionally, you can also provide a certificate for a Certificate Authority (CA) or configure a private key.

Note

You can use a custom, self-signed SSL certificate. However, for production environments, Oracle recommends that you use a CA-issued SSL certificate, which reduces the risk of a man-in-the-middle attack.

    1. In the Compute Cloud@Customer Console navigation menu, select Networking, then select Load Balancers.

    2. At the top of the page, select the compartment that contains the load balancer.
    3. Select the name of the LB for which you want to add the certificate.
    4. Under Resources, select Certificates.
    5. Select Create Certificate.

    6. In the Load Balancer Create Certificate dialog box, enter the following information:

      • Name: Enter a descriptive name for the certificate bundle. The name must be unique and can't be changed. The name can include only alphanumeric characters, dashes, and underscores. The name cannot contain spaces.

      • Public certificate: Either upload the certificate .pem file, or paste the content from the .pem file directly into the dialog box using drag.

      • Certificate Authority: Select the Enable certificate authority box if you are also using a certificate authority (CA) certificate. Either upload the CA certificate .pem file, or paste the content from the .pem file directly into the dialog box using drag.
      • Private Key: Select the Enable private key box if you are also using a private key certificate. Either upload the private key .pem file, or paste the content from the .pem file directly into the dialog box using drag.

    7. Select Create Certificate.

  • Use the oci lb certificate create command and required parameters to create a public SSL certificate to use with a load balancer.

    oci lb certificate create --certicate-name <certificate-name> --load-balancer-id <load-balancer_OCID> --certificate-file <path_to_file>

    For a complete list of CLI commands, flags, and options, see the Command Line Reference.

  • Use the CreateCertificate operation to create a load balancer certificate.

    For information about using the API and signing requests, see REST APIs and Security Credentials. For information about SDKs, see Software Development Kits and Command Line Interface.