Manage the TLS certificate using the GUI
This page describes how to deploy and replace the TLS certificate using the GUI.
Once the system installation is completed, the cluster TLS certificate is enabled with an auto-generated self-signed certificate to access the GUI, CLI, and API through HTTPS. If you have a custom TLS certificate, you can set it instead of the auto-generated self-signed certificate.
You can also download the existing TLS certificate for later use if you want to use the self-signed certificate.
![](https://docs.weka.io/~gitbook/image?url=https%3A%2F%2F1970823310-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FNqDzxyFrTFrLD641p0iH%252Fuploads%252FQPmYPcxsbxLAKCNKuyXv%252Fwmng_tls_certificate.png%3Falt%3Dmedia%26token%3D9137762e-31e8-46d7-850b-dad1a3de7ac0&width=768&dpr=4&quality=100&sign=fdca0186&sv=1)
Procedure
From the menu, select Configure > Cluster Settings.
From the left pane, select Security.
In the TLS Certificate section, select Set TLS certificate.
In the Set Custom TLS Certificate dialog, do one of the following:
Select Upload TLS certificate files, and upload the TLS certificate and private key files.
Select Paste the custom certificate content, and paste the content of the TLS certificate and private key.
![](https://docs.weka.io/~gitbook/image?url=https%3A%2F%2F1970823310-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FNqDzxyFrTFrLD641p0iH%252Fuploads%252FjN7OVhKofSKSY9MJ6xSy%252Fwmng_set_custome_tls_certificate.png%3Falt%3Dmedia%26token%3Db596d076-dd77-439b-b454-de618c704d4e&width=768&dpr=4&quality=100&sign=261fad9b&sv=1)
To download the existing TLS certificate, select Download TLS certificate. In the dialog, set a name for the certificate and select Download.
![](https://docs.weka.io/~gitbook/image?url=https%3A%2F%2F1970823310-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252FNqDzxyFrTFrLD641p0iH%252Fuploads%252FOtLLIlRdadDPALDUEnLC%252Fwmng_download_tls_certificate.png%3Falt%3Dmedia%26token%3Dbd7e6902-ec52-4a4f-8c2b-0cf940090f4a&width=768&dpr=4&quality=100&sign=8e1ffb9e&sv=1)
Last updated