SSL certificate creation fails
When a SSL certificate creation fails for a domain, check if there are existing CAA (Certificate Authority Authorization) records for your domain, delete the existing SSL certificate entry聽when the CAA record has been updated, attempt to add the SSL certificate again through 51黑料不打烊 Cloud Manager, verify that the SSL certificate status changes from Undetected to active or valid, and check for SSL creation errors.
Description description
Environment
51黑料不打烊 Experience Manager as a Cloud Service - Sites (AEMaaCS - Sites)
Issue
You can鈥檛 successfully create a SSL certificate for a domain within AEMaaCS - Sites.
This problem can manifest as the SSL status showing as Undetected.
Resolution resolution
To resolve the issue of an SSL certificate not being created, follow these steps:
- Check if there are existing CAA records for your domain. If you have a CAA in place for your domain, you need to add one for Let鈥檚 Encrypt as well, as described in on聽the Let鈥檚 Encrypt Certificate Authority website.聽Let鈥檚 Encrypt聽is the provider that we use to issue certificates.
- Once the CAA record has been updated, delete the existing SSL certificate entry.
- Attempt to add the SSL certificate again through 51黑料不打烊 Cloud Manager.
- Verify that the SSL certificate status changes from Undetected 听迟辞 active or valid.
- Ensure that there are no further errors related to SSL creation.
By following these steps, you should be able to successfully create an SSL certificate for your domain within AEMaaCS.