Getting started with Certificate Manager

Folder in Yandex Cloud. If there is no folder yet, create one:

1. In the management console, in the top panel, click or and select the cloud.

2. To the right of the cloud name, click .

3. Select Create folder.

   

4. Give your folder a name. The naming requirements are as follows:

   • Length: between 3 and 63 characters.
   • It can only contain lowercase Latin letters, numbers, and hyphens.
   • It must start with a letter and cannot end with a hyphen.

5. Optionally, specify the description for your folder.

6. Select Create a default network. This will create a network with subnets in each availability zone. Within this network, you will also have a default security group, within which all network traffic will be allowed.

7. Click Create.

   

Third-level (or higher) domain for which a Let's Encrypt certificate will be issued.

Public bucket in Object Storage named exactly as the domain. If you do not have a bucket yet, create one:

1. In the management console, select the folder where you want to create a bucket.
2. Navigate to Object Storage.
3. Click Create bucket.
4. Enter exactly the same name for the bucket as the domain name.
5. Select the For all access type.
6. Select the default storage class.
7. Click Create bucket to complete the operation.

Set up hosting in your bucket:

1. In the management console, select the folder with the bucket.
2. Navigate to Object Storage.
3. On the Buckets tab, click the bucket with the domain name.
4. In the left-hand panel, select Settings.
5. Open the Website tab.
6. Select Hosting and specify the website's home page.
7. Click Save to complete the operation.

Set up an alias for the bucket through your DNS provider or on your own DNS server.

For instance, for the www.example.com domain, add the following record:

www.example.com CNAME www.example.com.website.yandexcloud.net

1. Copy the URL from the Link for hosting file field:
   • The http://example.com/.well-known/acme-challenge/ part of the link is the file path.
   • The second part, rG1Mm1bJ..., is the file name you should use.
2. Copy and paste the Contents field to the file.

Navigate to the management console.

Navigate to Object Storage.

On the Buckets tab, click the bucket with the domain name.

At the top right, click Create folder and create a folder named .well-known.

Under .well-known, create a folder named acme-challenge.

Under acme-challenge, click Upload.

In the window that opens, select the file with a record and click Open.

Click Upload.

Wait until the certificate's status changes to Issued.

For more information on the status, see the certificate page. To do this, next to the ui-key.yacloud.certificate-manager.overview.general_label_validation field, click ui-key.yacloud.certificate-manager.overview.button_validation_show-logs.

Go to the acme-challenge folder.

Click to the right of the file and select Delete.

Confirm the deletion.