Getting started with Certificate Manager

Folder in Yandex Cloud. If there is no folder yet, create one:

1. In the management console, in the top panel, click and select the cloud.

2. To the right of the cloud name, click .

3. Select Create folder .

   

4. Give your folder a name. The naming requirements are as follows:

   • It must be from 2 to 63 characters long.
   • It can only contain lowercase Latin letters, numbers, and hyphens.
   • It must start with a letter and cannot end with a hyphen.

5. Optionally, specify the description for your folder.

6. Select Create a default network. This will create a network with subnets in each availability zone. Within this network, you will also have a default security group, within which all network traffic will be allowed.

7. Click Create.

   

Third-level (or higher) domain that the Let's Encrypt certificate is issued for.

Public bucket in Object Storage with exactly the same name as the domain. If you do not have a bucket yet, create one:

1. In the management console, select the folder where you want to create a bucket.
2. Go to Object Storage.
3. Click Create bucket.
4. Enter exactly the same name for the bucket as the domain name.
5. Select the For all access type.
6. Select the default storage class.
7. Click Create bucket to complete the operation.

Set up hosting in your bucket:

1. In the management console, select the folder with the bucket.
2. Go to Object Storage.
3. On the Buckets tab, click the bucket with the same name as the domain.
4. In the left-hand panel, select Settings.
5. Open the Website tab.
6. Select Hosting and specify the website's homepage.
7. Click Save to complete the operation.

Set up an alias for the bucket through your DNS provider or on your own DNS server.

For instance, for the www.example.com domain, add the following record:

www.example.com CNAME www.example.com.website.yandexcloud.net

1. Copy the URL from the Link for hosting file field:
   • The http://example.com/.well-known/acme-challenge/ part of the link is the file path.
   • The second part, rG1Mm1bJ..., is the file name you should use.
2. Copy the Contents field to the file.

Navigate to the management console.

Go to Object Storage.

On the Buckets tab, click the bucket with the same name as the domain.

At the top right, click Create folder and create a directory named .well-known.

Under .well-known, create the acme-challenge directory.

In acme-challenge, click Upload.

In the window that opens, select the file with a record and click Open.

Click Upload.

Wait until the certificate's status changes to Issued.

For more information on the status, see the certificate page. To do this, click Viewing logs next to Validation.

Go to the acme-challenge directory.

Click to the right of the file and select Delete.

Confirm the deletion.