# Certificate Management

## Overview <a href="#tong-quan" id="tong-quan"></a>

**The Certificate Management** feature on the vCDN service allows customers **to upload SSL Certificates and SSL Keys** , including **the CA (Certificate Authority) key chain** . This helps establish a secure HTTPS connection for CDN resources and ensures that all data transmitted over the network is encrypted and protected.

***

## **Detail** <a href="#chi-tiet" id="chi-tiet"></a>

* **Private Key** : private key file corresponding to SSL certificate. This is the certificate's security key, only your server has the right to use it.
* **SSL Certificate** : your SSL certificate file. This is a certificate issued by a Certificate Authority (CA), confirming that the connection between the user and the server is secure.
* **CA Root Chain** : If your certificate requires **a CA Chain** (which includes intermediate certificates between the SSL certificate and the root CA), you need to upload these intermediate certificates as a chain.

## Steps to follow <a href="#cac-buoc-thuc-hien" id="cac-buoc-thuc-hien"></a>

**Step 1:** Access vCDN Portal at [https://vcdn.vngcloud.vn](https://vcdn.vngcloud.vn/live-entrypoint/list.html)

**Step 2:** Select **Certificate** , then select **Upload.**

<figure><img src="/files/kGxVTTOjxtpW2cMAgXfh" alt=""><figcaption></figcaption></figure>

**Step 3:** Click the **Upload Private Key** button to upload the Certificate's private key, or you can also paste the private key into the box below.

**Step 4:** Click the Upload Certificate button to upload the Certificate's CRT/PEM file or you can also paste the CRT/PEM information into the box below.

**Step 5:** Click the Upload CA Root Chain button to upload the certificate information of the certificate provider. You can leave it blank if there is no information. *<mark style="background-color:blue;">Some older browser versions may report an invalid Certificate error if the CA Root Chain information is missing.</mark>*

<figure><img src="/files/enkthwjRBfZjKPNy4i7R" alt=""><figcaption></figcaption></figure>

**Step 6:** After entering/uploading all the information, select **Save and Deploy** to save and activate the certificate, ready for CDNs to use.

If the certificate is not ready to use immediately, select **Save as Draft** to save it.

{% hint style="info" %}
**Attention:**

* vCDN provided by GreenNode is a content delivery service via HTTP protocol with TLS/SSL (HTTPS) support. Therefore, TLS Certificates - uploaded by customers for the purpose of encrypting the HTTP channel between users and the CDN server system - are simultaneously stored and managed by customers and GreenNode until customers perform a deletion command via the Web Portal/API interface.
* GreenNode commits not to share these TLS Certificates with any third party.
  {% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.vngcloud.vn/vng-cloud-document/vcdn/security-vcdn/certificate-management.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.