DocsICP FilingConsole
Documentation

Website HTTPS

Updated at:
Copy as MD
My Favorites

This topic describes how to enable HTTPS for your website.

Background information

HTTPS is more secure than HTTP. It uses encryption in transit and identity authentication to protect data. Websites that use HTTPS do not display "not secure" warnings in browsers.

Configure a free HTTPS certificate

Note

There are two types of free HTTPS certificates: One-click Configuration and Alibaba Cloud Free HTTPS Certificate Configuration. The One-click Configuration method is recommended for its simplicity. Click One-click Configuration. After the configuration is successful, click OK. The certificate is valid for 90 days and is automatically renewed one week before it expires.image.pngimage.pngThe following steps describe how to use the Alibaba Cloud Free HTTPS Certificate Configuration method.

  1. Go to https://www.aliyun.com/ and log on to your Alibaba Cloud account. Use the account that owns the domain name or the product. Using the account that owns the domain name is recommended.image.png

  2. Note

    If your domain name already has an HTTPS certificate, skip to Step 6.

  3. After you log on, click Console.image.png

  4. Search for SSL and click Certificate Management Service (SSL Certificate) to go to the service console.搜索SSL.jpg

  5. Click SSL Certificate Management > Personal Test Certificate (formerly Free Certificate).

    1. Click Create Certificate. If a message indicates an insufficient number of certificates, click Purchase. This redirects to the same page as clicking Buy Now. Follow the instructions for the Buy Now operation.创建证书.jpg证书数量不足.jpg

    2. Click Buy Now.立即购买.jpg

      • Select Personal Test Certificate > Personal Test Certificate (Free Edition) > No Stability Guarantee. Set the quantity to 20. Select Not Required. Select the Certificate Terms of Service checkbox. Click Buy Now and complete the payment.立即购买规格选择.jpg待支付页面.jpg

      • After the Congratulations, payment successful message appears, return to the SSL Certificate Management console page.image.png购买后创建证书.jpg非快捷签发.jpg

      • After the payment is successful, click Create Certificate. The number of certificates that can be created is displayed. Enter the domain name and click OK. The certificate status changes to Pending Request.

  6. Click Certificate Request to attach the domain name to the certificate.证书申请.jpg

  7. Attach Domain Name to Certificate: Enter the domain name to attach to the certificate. Keep the default values for the other options. Click Submit for Review.域名绑定.jpg

  8. Add a verification record and wait for the certificate to be reviewed and issued.添加验证.jpg

    1. If the domain name was purchased from Alibaba Cloud, log on to the Alibaba Cloud account that you used to purchase the domain name. Click Console > orange icon with three horizontal lines in the upper-left corner > Domain Names to go to the Domain Names console.image.png

    2. Click Domain Name List. Find the domain name that you purchased and click Parse.image.png

    3. Click Add Record. For **Record Type**, select TXT. Copy the **Host Record** and **Record Value** from the SSL Certificate console and paste them into the corresponding fields. Then, click Confirm.Add a record and perform verification.jpg

    4. After you add the DNS record, return to the SSL Certificate console and click Verify. After the Domain validation successful message appears, wait for the certificate to be issued.解析记录验证成功.jpg

  9. After the estimated issuance time has passed, refresh the page and check the Status. When the status is Issued, click Download > Download "Nginx type".下载Nginx.jpg

  10. Enable HTTPS. Log on to your website's backend. Click Site Management > Domain Management. Wait for the system to detect the attached HTTPS certificate. The Enable HTTPS button appears in the Actions column. Click Enable HTTPS. In the dialog box that appears, select Method 1: Import ZIP file to enable HTTPS for your website.

Note

  • To purchase a more advanced certificate, click Purchase Certificate.

  • After you configure the security certificate, publish your website to make the changes take effect.

Troubleshoot "not secure" warnings after enabling HTTPS

  • Scenario 1: The Alibaba Cloud Personal Test Certificate (Free Edition) is valid for three months. If it has expired, your website will show a "not secure" warning.

    Solution: Follow the Alibaba Cloud Free HTTPS Certificate Configuration steps described above to purchase a new Personal Test Certificate (Free Edition). Then, enable HTTPS again.

  • Scenario 2: The webpage loads external resources, such as .js files, .css files, or image URLs, over insecure HTTP connections.

    Solution: Update the references to these resources to use HTTPS, or remove them.

  • Scenario 3: The domain name entered during the certificate request does not match the domain name used to access the site.

    Solution: Request a new certificate and enter the correct domain name.

  • Scenario 4: An untrusted root certificate was used.

    Solution: Request a new certificate by following the steps described above.