# Certificate Manager

### Overview

Krutrim Cloud **Certificate Manager** allows you to securely **store, manage, and attach SSL/TLS certificates** to your Krutrim cloud resources. Certificates ensure encrypted communication between your applications and end users, improving security and trust.

At present, Certificate Manager supports attaching certificates to **Load Balancers**. In future, support will be extended to other services such as CDN, API Gateway, and custom domain integrations.

Key capabilities include:

* Upload and centrally manage SSL/TLS certificates.
* Attach uploaded certificates to supported Krutrim Cloud resources.
* Update or replace expiring certificates without disrupting attached resources.

### Using Certificate Manager in Krutrim Cloud Console

#### 1. Navigate to Certificate Manager

* Sign in to your **Krutrim Cloud Console**.
* From the left navigation pane, go to **Administration → Certificate Manager**.
* The Certificate Manager dashboard lists all certificates uploaded.

#### 2. Upload a Certificate

* Click on **Upload Certificate**.
* Provide a descriptive **Name** for your certificate.
* Upload the required certificate files in .p12 format.
* If your certificate file is password-protected, please also provide the certificate password to allow read access.
* *(Optional)* Add **tags** (for example: `prod`, `staging`, `web-app`) to easily group and filter certificates later.
* Click **Upload Certificate** button to upload.
* Once uploaded, the certificate will appear in the list view with status **Active**.
* From the dashboard, you can view certificate details such as name, primary domain, expiry date and action button menu with options of **View Details, Update Certificate** and **Delete.**

#### 3. Update an Existing Certificate

If your certificate is expiring or needs renewal:

* Go to **Certificate Manager → Select Certificate → Update Certificate**.
* Upload the new **certificate file** and its corresponding **password**, if applicable.
* Optionally update **Certificate Name** or **tags**.
* Once updated, all associated resources (e.g., Load Balancers) will automatically start using the renewed certificate without reattachment.

#### 4. Attach a Certificate to Load Balancer

* From the left navigation pane navigate to your **Load Balancer** service in the console.
* While creating or editing a Load Balancer, go to the **Listener Configuration** section.
* Under **SSL** **Certificate**, choose an existing certificate from the dropdown list.
* Save or update the Load Balancer configuration.
* Once attached, SSL termination for your Load Balancer will be handled using the selected certificate.

#### 5. Detach or Delete a Certificate

* To detach, open the associated Load Balancer configuration and remove the certificate.
* To delete a certificate:
  * Go to **Certificate Manager → Select Certificate → Delete**.
  * If the certificate is **currently attached to any resources**, deletion will be blocked.
  * In this case, the **Delete modal** provides a **CTA button** that redirects you to the associated resource(s) page. You can detach the certificate there, and then return to Certificate Manager to delete it.
* Deletion is irreversible and the certificate cannot be recovered once deleted.

### Notes

* Supported file formats: `.p12`
* Maximum file size: **64 KB** per certificate file
* Certificates must be **valid and not expired** at the time of upload
* Tags can be used to organise certificates by environment, application, or purpose


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloud.olakrutrim.com/basics/certificate-manager.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.