Knowledge Base
How to Install and Bind a Server Certificate on an AWS Elastic Load Balancer (ELB)?
Overview:
This guide provides the step-by-step process for installing or importing an SSL/TLS certificate into AWS Certificate Manager (ACM) and binding it to an Elastic Load Balancer (ALB, NLB, or CLB). This ensures secure HTTPS communication for applications hosted behind AWS Load Balancers.
Prerequisites
Before you begin, ensure you have the following:
-
Access to the AWS Management Console with permissions for ACM and ELB.
-
The SSL/TLS certificate files (certificate body, private key, and certificate chain) if you plan to import a certificate.
-
To install or bind a server certificate from AWS Certificate Manager (ACM) to an Elastic Load Balancer (ELB); the certificate must first be in the same AWS Region as your load balancer.
-
This process varies slightly depending on whether you are using an Application Load Balancer (ALB), Network Load Balancer (NLB), or Classic Load Balancer (CLB).
Procedure
Step 1: Request or Import a Certificate in AWS ACM
You need a valid SSL/TLS certificate for your domain(s).
-
Sign in to the AWS Management Console.
-
Switch your region to US East (N. Virginia) in the top right corner of the console.
-
Navigate to AWS Certificate Manager (ACM).
-
Import a third-party certificate.
-
For an imported certificate, you will provide the certificate body, private key, and certificate chain.
-
Ensure the status of certificate changes to "Issued" before proceeding.
Step 2: Bind the Certificate to ELB
For Application or Network Load Balancers (ALB/NLB)
-
Open the Amazon EC2 Console and select Load Balancers from the navigation pane.
-
Select your load balancer and go to the Listeners and rules tab.
-
Click the Protocol:Port (e.g., HTTPS:443) for the listener you want to update.
-
Navigate to the Certificates tab:
-
To change the default certificate: Select Change default, pick your ACM certificate, and click Save as default.
Need help?
Need help making a purchase? Contact us today to get your certificate issued right away.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
