The Cluster Certificate is used by the Zadara Compute web UI and the APIs. By default, Zadara will apply a *.zadara.com certificate, which we will automatically update.

OPaaS customers can install their own TLS certificate, at which point the OPaaS customer must perform certificate updates, as Zadara cannot issues certificates for custom domains. 

Creating a Custom Certificate

 A user with Cloud MSP permissions can navigate to Configuration > Cluster Certificates and upload your certificate:

Ensure that the full certificate chain is included with the certificate. If your SSL provider does not provide the certs with the full cert chain, ensure that you add any intermediate certificates, and the root certificate with the certificate. 

You can do this by simply copying-and-pasting the certs into a single .crt file, as it's a plaintext format. An example of what a full chain certificate might look like:

-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: your_domain_name.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: Intermediate.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Root certificate: RootCertificate.crt)
-----END CERTIFICATE-----

Please consult the documentation from your certificate issuer if you're unable to acquire or create a full-chain cert.

Applying a Custom Certificate

After creating the new certificate in Zadara Compute, it must Installed. To do so, simply select the Certificate by clicking on it, and then click the Install button:

Please be aware that this comes with a brief reload of the web services, which may briefly impact active connections to the web UI and API.