Get started
Yandex Certificate Manager

Backups

Save a certificate

To save a certificate:

  1. Get the certificate ID.

    1. In the management console, select the folder where the certificate is located.
    2. From the list of services, select Certificate Manager.
    3. Copy the contents of the ID field for the certificate you want to save.

    If you don't have the Yandex.Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the CLI command to get the certificate list:

      yc cm certificate list --help

    2. Run the command:

      yc cm certificate list

  2. Get the contents of the certificate.

    If you don't have the Yandex.Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the CLI command to get the certificate contents:

      yc cm certificate content --help

    2. Run the command:

      yc cm certificate content \
--id <certificate ID> \
--chain <path to the file to save the chain to> \
--key <path to the file to save the key to>
...

    Keep the resulting files in a secure place for long-term storage.

  3. Repeat the procedure for each certificate you want to back up.

Restore a certificate

Note

You can't restore an expired certificate.

To restore a user certificate from the certificate chain and key files:

  1. Prepare the files with the certificate contents.

  2. Import the certificate.

    1. In the management console, select the folder where the certificate will be restored.
    2. In the list of services, select Certificate Manager.
    3. Click Add certificate.
    4. In the menu that opens, select User certificate.
    5. In the window that opens, enter a name for the certificate in the Name field.
    6. (optional) In the Description field, enter a description for the certificate.
    7. In the Intermediate certificate chain field, click Add chain.
      1. Choose how to add it: File.
      2. Click Select file and specify the certificate chain file.
      3. Click Add.
    8. In the Private key field, click Add private key.
      1. Select how to add your certificate: File or Text.
      2. Click Select file and specify the private key file.
      3. Click Add.
    9. Click Create.

    If you don't have the Yandex.Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the command:

      yc cm certificate create --help

    2. Run the command:

      yc cm certificate create \
--name <certificate name> \
--chain <path to the certificate chain file> \
--key <path to the private key file>
...

    The ID of the restored certificate will be different from the ID that the certificate had when it was saved.

  3. Repeat the process for each certificate you want to restore.

The saved Let's Encrypt® certificate becomes a user certificate after it's restored. To renew this certificate, download its latest version yourself.

See also

In this article: