Manage certificates

This page describes how to use Certificate Manager to create and manage Transport Layer Security (TLS) (formerly SSL) certificates.

For more information, see Supported TLS certificates.

Create a Google-managed certificate

Certificate Manager lets you create Google-managed certificates in the following ways:

Google-managed certificates with load balancer authorization (global)
Google-managed certificates with DNS authorization (global, regional, and cross-region)
Google-managed certificates with Certificate Authority Service (CA Service) (global, regional, and cross-region)

Load balancer authorization

Load balancer authorization lets you obtain a Google-managed certificate for your domain when traffic is served by the load balancer. This method doesn't require any additional DNS records for certificate provisioning. You can use load balancer authorizations for new environments with no existing traffic. For information about when to use load balancer authorization with a Google-managed certificate, see Domain authorization types for Google-managed certificates.

You can create Google-managed certificates with load balancer authorization only in the global location. Load balancer authorized certificates don't support wildcard domains.

Roles required for this task

To perform this task, you must have one of the following IAM roles on the target Google Cloud project.

Certificate Manager Editor role (roles/certificatemanager.editor)
Certificate Manager Owner role (roles/certificatemanager.owner)

For more information, see Roles and permissions.

Note: If you aren't assigned the required roles, contact the IAM Administrator who has the Project IAM Admin role (roles/resourcemanager.projectIamAdmin) to grant you the missing roles.

Manage certificates Stay organized with collections Save and categorize content based on your preferences.

Create a Google-managed certificate

Load balancer authorization

Roles required for this task

Manage certificates