ZStack Cloud Platform
Single Server, Free Trial for One Year
-
Documentation&Tools
Comprehensive product documentation and tools
-
Support & Services
Upholding the value of Customer First and the mission of Serving Customer, ZStack is dedicated to providing secure and stable services for customers.
-
Training & Certification
To educate ZStack partners and interested individuals about cloud computing and to cultivate cloud computing talent.
-
Content
ZStack provides innovative cloud infrastructure for ten major industries
VMware-to-ZStack Case Collection
The report provides three major
solutions and customer case studies for transitioning from VMware to ZStack.
ZStack Cloud 4.8.10>ZStack Cloud Tutorials>ZStack Cloud Private Cloud>UI Login Through HTTPS Tutorial>UI Configuration Method
UI Configuration Method
The following sections delve into the HTTPS configuration on the Cloud. In the following sections, you will learn how to:
- Add a third-party certificate
- Add a system self-signed certificate
- Update certificate
- Switch back to HTTP to log in to the UI
Add a Third-Party Certificate
In this section, you will learn how to import a third-party certificate via the UI interface.
You will need the following resources or permissions to proceed with this section:
- A latest ZStack Cloud environment.
- A admin or platform administrator permission to configure certificates.
- A valid certificate issued by the commercial CA.
- Certificates and certificate chains are only supported in CRT or PEM format, and private keys are only supported in KEY or PEM format.
Note: If your certificate does not meet the format requirements, please convert the format on your own.
- On the Import Certificate page, set the following parameters:
- Import Mode: Choose Third-party Certificate.
- Certificate Document: Upload or import a certificate.Note:
- Only CRT and PEM formats are supported.
- The certificate content starts with
----BEGIN CERTIFICATE----and ends with----END CERTIFICATE----.
- Private Key: Upload or import a private key.Note:
- Only KEY and PEM formats are supported.
- The private key content starts with
----BEGIN (RSAIEC) PRIVATE KEY----and ends with----END (RSAIEC) PRIVATE KEY----.
- Certificate Chain: Upload or import a certificate chain.Note:
- Only CRT and PEM formats are supported.
- The certificate content starts with
----BEGIN CERTIFICATE----and ends with----END CERTIFICATE----.
- HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.
Figure 1. Add Third-Party Certificate 
- After the above operations, the Cloud platform will automatically refresh and you can access the UI via the HTTPS protocol. Note: After configuring the certificate, the system will establish a new session, and you will need to log in to the UI interface again.
Add a System Self-Signed Certificate
In this section, you will learn how to import a system self-signed certificate via the UI interface.
You will need the following resources or permissions to proceed with this section:
- A latest ZStack Cloud environment.
- A admin or platform administrator permission to configure certificates.
- On the Import Certificate page, set the following parameters:
- Import Mode: Choose System Self-signed Certificate.
- Duration: Specify a validation duration for the system self-signed certificate. Valid values: 3 months, 1 year, 3 years, 5 years, and 10 years. By default, 10 years is selected.
- HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.
- Custom Certificate Information: Optional. If enabled, you can customize your self-signed certificate information.
- Common Name: Optional. Set a common name. By default, the common name is localhost.
The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/
- Organization Name: Optional. Set a name for your organization. By default, the organization name is localhost.
The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/
- Organization Unit Name: Optional. Set a name for your organization unit.
The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/
- Country/Region Name: The country/region name can only be set as CN.
- State/Province Name: Optional. Set the state or province name.
The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/
- Locality Name: Optional. Set a city name.
The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/
- Email Address: Optional. Set an email address.
- Common Name: Optional. Set a common name. By default, the common name is localhost.
Figure 1. Add System Self-Signed Certificate 
- After the above operations, the Cloud platform will automatically refresh and the UI can be accessed via the HTTPS protocol. Note: After configuring the certificate, the system will establish a new session, and you will need to log in to the UI interface again.
Update Certificate
In this section, you will learn how to how to update a certificate via the UI interface.
You will need the following resources or permissions to proceed with this section:
- A latest ZStack Cloud environment.
- A admin or platform administrator permission to configure certificates.
- The added certificate has changed and requires updates.
- On the Certificate Management page, click Update Certificate
Figure 1. Update Certificate 
- Review the configuration and click OK to update the certificate. Note: The system will detect the current certificate path and write the certificate information to that path when updating the certificate.
Next Chapter: Command-line Configuration Method