0

I adding a CSR (generated by the PM) to a new AWS Load Balancer in. I have the key's etc, however I'm unsure the significance of the 'Certificate name' field in the page's settings.

Is it arbitrary just for my reference in the AWS IAM Certificate manager? Or does it have to match the organization name used when creating the CSR? Also, I assume that if I wildcard the Certificate name when entering it, it's going to assume it's a wild-carded domain cert?

server.mydomain.com vs *.mydomain.com ?

Certificate Name

Tim
  • 31,888
  • 7
  • 52
  • 78
BurningKrome
  • 525
  • 2
  • 12
  • 22

2 Answers2

4

The certificate name is a plain english name to help you identify which certificate it is.

The docs don't cover this well, but you can see that it's just a name in the documentation here and here.

Tim
  • 31,888
  • 7
  • 52
  • 78
2

@Tim is right, it's just a label, but don't use this feature in ELB. This is loading the cert into IAM -- not Amazon Certificate Manager. These two services are independent.

IAM certs can only be manipulated with the CLI. It's an older service, and less friendly. If you get anything wrong here, your balancer fail to be be created, and you'll have to start over.

Instead, go to ACM and import your certificate. Then, when you create a balancer, select Use an existing certificate from ACM.

In addition to requesting SSL/TLS certificates provided by AWS Certificate Manager (ACM), you can import certificates that you obtained outside of AWS

http://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html

Importing your own cert is a feature added to ACM after it was initially launched. Remember that it's a regional service, so you'll need to import the cert into the correct ACM region.

ACM displays all of your certs together, including attributes and expiration dates, whether you obtained the cert for free from Amazon or purchased it from an external vendor and imported it into ACM, but it doesn't display IAM certs.

Michael - sqlbot
  • 22,658
  • 2
  • 63
  • 86