Yandex Cloud
  • Services
  • Solutions
  • Why Yandex Cloud
  • Pricing
  • Documentation
  • Contact us
Get started
Language / Region
© 2022 Yandex.Cloud LLC
Yandex Certificate Manager
  • Getting started
  • Step-by-step instructions
    • All instructions
    • Let's Encrypt® certificate
      • Create a certificate
      • Get the contents of a certificate
      • Domain rights check procedure
      • Renew a certificate
      • Edit a certificate
      • Delete a certificate
    • User certificate
      • Create a certificate
      • Get the contents of a certificate
      • Renew a certificate
      • Edit a certificate
      • Delete a certificate
    • Domain
      • Create a domain
      • Renew a domain certificate
      • Update a domain
      • Delete a domain
    • Backups
    • Adding alerts for certificates
  • Concepts
    • Overview
    • Let's Encrypt® certificate
    • User certificate
    • Check rights for domain
    • Integration with Yandex Cloud services
    • Quotas and limits
    • Domain
      • Overview
      • Integration with Yandex Cloud services
  • Access management
  • Pricing policy
  • API reference
    • Authentication in the API
    • gRPC
      • Overview
      • CertificateContentService
      • CertificateService
      • OperationService
    • REST
      • Overview
      • CertificateContent
        • Overview
        • get
      • Certificate
        • Overview
        • create
        • delete
        • get
        • list
        • listAccessBindings
        • listOperations
        • listVersions
        • requestNew
        • setAccessBindings
        • update
        • updateAccessBindings
  • Questions and answers
  1. Step-by-step instructions
  2. Backups

Backups

Written by
Yandex Cloud
  • Save a certificate
  • Restore a certificate

Save a certificate

To save a certificate:

  1. Get the certificate ID.

    Management console
    CLI
    1. In the management console, select the folder where the certificate is located.
    2. From the list of services, select Certificate Manager.
    3. Copy the contents of the ID field for the certificate you want to save.

    If you don't have the Yandex Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the CLI command to get the certificate list:

      yc cm certificate list --help
      
    2. Run the command:

      yc cm certificate list
      
  2. Get the contents of the certificate.

    CLI

    If you don't have the Yandex Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the CLI command to get the certificate contents:

      yc cm certificate content --help
      
    2. Run the command:

      yc cm certificate content \
      --id <certificate ID> \
      --chain <path to the file to save the chain to> \
      --key <path to the file to save the key to>
      ...
      

    Keep the resulting files in a secure place for long-term storage.

  3. Repeat the procedure for each certificate you want to back up.

Restore a certificate

Note

You can't restore an expired certificate.

To restore a user certificate from the certificate chain and key files:

  1. Prepare the files with the certificate contents.

  2. Import the certificate.

    Management console
    CLI
    1. In the management console, select the folder where the certificate will be restored.
    2. In the list of services, select Certificate Manager.
    3. Click Add certificate.
    4. In the menu that opens, select User certificate.
    5. In the window that opens, enter a name for the certificate in the Name field.
    6. (optional) In the Description field, enter a description for the certificate.
    7. In the Intermediate certificate chain field, click Add chain.
      1. Choose how to add it: File.
      2. Click Select file and specify the certificate chain file.
      3. Click Add.
    8. In the Private key field, click Add private key.
      1. Select how to add your certificate: File or Text.
      2. Click Select file and specify the private key file.
      3. Click Add.
    9. Click Create.

    If you don't have the Yandex Cloud command line interface yet, install and initialize it.

    The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

    1. View a description of the command:

      yc cm certificate create --help
      
    2. Run the command:

      yc cm certificate create \
      --name <certificate name> \
      --chain <path to the certificate chain file> \
      --key <path to the private key file>
      ...
      

    The ID of the restored certificate will be different from the ID that the certificate had when it was saved.

  3. Repeat the process for each certificate you want to restore.

The saved Let's Encrypt® certificate becomes a user certificate after it's restored. To renew this certificate, download its latest version yourself.

See also

  • Create a user certificate.

Was the article helpful?

Language / Region
© 2022 Yandex.Cloud LLC
In this article:
  • Save a certificate
  • Restore a certificate