Knowledge Base
How to Install and Bind a Server Certificate on a Google Cloud Load Balancer?
How to Install and Bind a Server Certificate on a Google Cloud Load Balancer?
Overview:
This guide provides the step-by-step process for preparing, uploading, and binding an SSL/TLS server certificate to a Google Cloud HTTPS Load Balancer. Following this procedure ensures that your load balancer can securely serve HTTPS traffic using a valid certificate.
Prerequisites
Before you begin, ensure you have the following:
-
Your SSL Certificate:
Certificate file (.crt, .cer, or .pem)
Private key (unencrypted .key)
Full chain including intermediates (CA bundle)
-
Google Cloud needs the certificate + private key + intermediates, all in PEM format.
-
Access to the Google Cloud Console with permissions to modify Load Balancer settings.
Procedure
Step 1: Prepare Your Certificate Files
Ensure that your certificate and private key are in the correct PEM format.
The combined certificate file should contain the server certificate followed by intermediate certificates:
1 -----BEGIN CERTIFICATE-----
2 (Your server certificate)
3 -----END CERTIFICATE-----
4 -----BEGIN CERTIFICATE-----
5 (Intermediate CA)
6 -----END CERTIFICATE-----
Your private key must appear as:
1 -----BEGIN PRIVATE KEY-----
2 ...
3 -----END PRIVATE KEY-----
If needed, combine your certificate and CA bundle:
1 cat your_domain.crt intermediate_bundle.crt > fullchain.pem
Step 2: Open the Google Cloud Console
-
Go to:
Navigation Menu → Network Services → Load Balancing
-
Select your HTTPS Load Balancer.
-
Open the Frontend configuration tab.
Step 3: Upload the SSL Certificate
-
In the Frontend configuration section:
-
Ensure Protocol = HTTPS
-
Under SSL Certificate, choose:
-
Create or select a certificate
-
Select:
-
Create a new certificate (Upload my certificate)
-
Provide:
-
Certificate Name
-
Certificate PEM → upload/paste fullchain.pem
-
Private Key PEM → upload/paste your .key
-
Click Create.
Step 4: Bind the Certificate to the Load Balancer
After creating the certificate:
-
In the frontend configuration, select your new certificate.
-
Save the load balancer configuration:
-
Click Update or Save at bottom.
-
Wait ~1–3 minutes for propagation.
Verification:
Run:
1 openssl s_client -connect yourdomain.com:443 -servername yourdomain.com
Check that:
-
Correct certificate is served
-
Full chain is intact
Or simply browse:
Need help?
Need help making a purchase? Contact us today to get your certificate issued right away.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
