The default validity period for SSL certificates is 1 year. You should renew and update the certificate within 30 calendar days before its expiration to extend its service duration. To prevent business disruptions caused by certificate expiration, Tencent Cloud provides the certificate auto-renewal service. This document describes how to enable certificate auto-renewal (for paid certificates only).
Applicable Objects
Certain paid certificates (validity period of 1 year). Other certificate brands will be supported soon. Stay tuned.
DNSPod |
| TrustAsia | WoTrus |
DV |
| DV | DV |
Single domain name | Wildcard domain name | Wildcard domain name | Wildcard domain name |
Supported | Supported | Supported | Supported |
Notes
Auto-renewal can only be enabled 14 days (included) before the SSL certificate expires. It cannot be enabled if the remaining time is less than 14 days.
Auto-renewal will be terminated if fee deduction from your account balance fails. You need to renew manually.
After the certificate is issued, you need to manually update it to you cloud resources.
Auto-Renewal Process
Step 1: Entering the Certificate List to Enable Auto-Renewal
1. You can enable auto-renewal for paid certificates 14 days before expiration. Go to the SSL Certificate Control, find the target certificate in My Certificates, and enable auto-renewal. 2. Click Activate Auto-Renewal in the pop-up dialog box of SSL certificate renewal.
Step 2: Ensuring Sufficient Account Balance
After you enable auto-renewal, the fee is not deducted immediately. The system will deduct the fee 30 days before the certificate expiration. Please ensure your account balance is sufficient. The fee for renewal is for reference only, and the amount is subject to the actual deduction.
Note:
If the deduction fails due to insufficient account balance, auto-renewal of the certificate will be terminated. You need to renew manually.
Step 3: Deducting the Fee Automatically by the System 30 Days Before the Certificate Expires
After the system successfully deducts the fee, the certificate renewal is successful, and a new certificate pending validation will be generated automatically.
Note:
The new certificate's validity period after renewal will be extended by one year from the expiration date of the old certificate. For example, if the old certificate to be renewed expires on November 1, 2021, and you complete the renewal and issuance on October 1, 2021, the new certificate's validity period will be from October 1, 2021, to November 1, 2022.
Step 4: Issuing the New Certificate (Manual Operation May be Required)
If the domain name bound to your certificate is hosted on Tencent Cloud, the system will automatically add a DNS validation. If the domain name is hosted on a third-party platform, you need to manually add a DNS validation.
Note:
If the domain name bound to your certificate is not hosted on Tencent Cloud, please be sure to take note. The new certificate cannot be issued if no DNS validation is added within seven days.
If your certificate is of the OV or EV type, you may also need to upload the confirmation letter. For the process of uploading the confirmation letter, see Upload the confirmation letter. Step 5: Updating the Certificate to Cloud Resources After the Issuance
After the certificate is successfully issued, manually update the new certificate to the associated cloud resources.