Available in Classic and VPC
Certificate Manager automatically renews the certificates it issues before they expire. Upon completion of renewal, the renewed certificate is automatically applied to the integrated service instances in use. For certificates that meet the automatic renewal conditions, renewal attempts are made daily from 45 days (renewal start date) to 30 days (renewal end date) before the authentication end date.
Automatic renewal targets
Automatic renewal is provided only for certificates issued using the DNS validation method.
- As of October 17, 2024: Available only for Cloud Basic certificates.
- As of October 17, 2024: Available only for certificates used exclusively with VPC Load Balancer.
Automatic renewal quickstart
Automatic renewal proceeds as follows.
1. Check renewal requirements
Check if the certificate to renew meets the automatic renewal conditions.
- In the NAVER Cloud Platform console, navigate to Menu > All Services > Security > Certificate Manager > Cloud Certificate > Certificate List and select the certificate to renew.
- Check if the Renewal eligibility is shown as Qualified in the certificate renewal information. If the certificate is not qualified for renewal, see Renewal eligibility in this guide for the reasons.
- Check if it is set as a renewal target from the certificate renewal information. The Renewal target status must be "Y." If it's "N," click Set renewal target to set it as a renewal target.
- Certificates that are qualified for renewal and set as renewal targets display Renewal start date and Renewal end date.
2. Configure DNS validation for domains
- Check that the CNAME DNS record name and record value required for DNS validation are set for all domains included in the certificate. For more information on how to set them, see DNS validation.
3. Renewal process
For certificates that meet the automatic renewal conditions, renewal attempts are made daily from 45 days (renewal start date) to 30 days (renewal end date) before the authentication end date.
- The renewal process runs for about 1 hour starting at 1:00 AM (UTC+09:00) each day. The process stops when renewal is completed or the end date is reached.
- Once the renewal process ends, the renewal results can be viewed from the Certificate Manager console. Results are also sent to the notification recipients configured in Notification Setting.
- Upon successful renewal, the renewal status shows as Succeeded and the Renewal completion date is displayed. Under Instance renewal status > Shortcut, Certificate renewal status (Y/N) shows Y.
Set renewal targets
You can set whether an item is a renewal target. Navigate to Cloud Certificate > Certificate List, select a certificate, and click Certificate renewal information > Set renewal target.
- Enabled, renewal target status Y: If the certificate is used by a VPC Load Balancer instance, automatic renewal runs from 45 days to 30 days before the certificate expires.
- Disabled, renewal target status N: The certificate is excluded from renewal. Even if renewal eligibility is met and the certificate is within 45 days of expiration, the renewal process will not be attempted.
When issuing a certificate with the DNS validation method, you can set up the automatic renewal target in advance in step 3. Review and request.
Renewal eligibility
To view renewal eligibility, navigate to Cloud Certificate > Certificate List, select a certificate, and open Certificate renewal information.
| Type | Description | Condition |
|---|---|---|
| Qualified | Automatic renewal is attempted from 45 days to 30 days before expiration for certificates that are qualified and set as renewal targets. | Certificates used exclusively with VPC Load Balancer that have more than 30 days of validity remaining |
| Not qualified | Certificates that are not qualified for renewal cannot be automatically renewed. | Certificates that are not in use, are used with services other than VPC Load Balancer, or have 30 days or less of validity remaining |
Renewal status
To view the renewal status, navigate to Cloud Certificate > Certificate List, select a certificate, and open Certificate renewal information.
| Renewal status | Description |
|---|---|
| Renewing | The renewal requirements are met, and renewal is in progress. |
| DNS validation pending | DNS validation is in progress for at least 1 domain included in the certificate. When the renewal process begins the next day, it will retry starting with DNS validation. If DNS validation continues to fail until the renewal end date, the renewal fails. |
| Renewal pending | The status is Renewal pending if no instance uses the certificate when the renewal period begins 45 days before expiration. If the certificate remains unused until 30 days before expiration, the renewal fails. |
| Succeeded | The certificate has been renewed and automatically applied to the integrated instances in use. |
| Failed | Renewal has failed. No further renewal attempts are made. If there are instances in use and certificate replacement is needed, you must obtain and apply a new certificate. See the following 3 reasons for renewal failure:
|