5

I'm trying to see if I can install certificates on individual instances in AWS.

I currently use a certificate on the loadbalancer, but does that mean that the certificate is installed on all the instances that use that loadbalancer ?

this page : https://aws.amazon.com/certificate-manager/faqs/

says that certificates provided by ACM can only be used with specific AWS services Elastic Load Balancing and Amazon CloudFront.

If I get the certificate from another service is there a way to install it on the instances and make sure it's installed on all other instances that get spun up when scaling up and adding new ec2 instances ?

  • They are servers aren't they so why not just copy it like any other server? – Matt Mar 6 '17 at 18:57
  • 1
    If you're using a certificate on the ELB, all installing an SSL certificate on the EC2 instances will do is allow the ELB-->EC2 connections to be via SSL. It won't affect the Internet-->ELB connection at all. – ceejayoz Mar 6 '17 at 19:02
  • What are you trying to accomplish by putting the cert on the instances? Instance authentication? Or something else entirely? – Michael - sqlbot Mar 6 '17 at 23:47
  • I just want to make sure the connection is secure all the way. so the ELb->EC2 connection is secure. I already have a cert on the ELB. – Varda Elentári Mar 7 '17 at 3:13
14

A certificate installed on the load balancer using certificate manager is only on the ELB. AWS can't automatically put anything on your EC2 instances EBS volume. You, however, can do anything on an EC2 instance you can do on any other server. You can't use the certificate from Certificate Manager on your instance, it's not available.

If you want the connection between ELB and your web server to be HTTPS you need to install your own certificate. I have a tutorial on how to do this with Nginx and Let's Encrypt available here. There are dozens of tutorials and dozens of ways to do this.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.