How do I add or update a TLS certificate and private key in Fasterize?

Introduction

To secure your site's HTTPS traffic, you must install a TLS certificate and its private key on the Fasterize platform. This operation ensures TLS termination, which is essential for encrypting exchanges between visitors and your site. Here's how to easily perform this operation from the Fasterize console.

1. Prepare your TLS certificate and private key

Required files

For the import to work correctly, you must have two files in PEM format (human-readable text):

• The public certificate : start with ----BEGIN CERTIFICATE-----
• The private key : start with ----BEGIN RSA PRIVATE KEY-----

💡 Tip: Open your files in a simple text editor to check their structure.

2. Add a TLS certificate via the dashboard

Steps to follow

• Log in to your Fasterize console
• Go to the Organization menu > Certificates
• Click Import Certificate
• Upload both files: certificate and private key

💡 Once the certificate has been imported, it is automatically deployed to the associated configurations.

3. Advanced option: do not compress the certificate

What is this option for?

• By default, Fasterize can compress the certificate by removing certain intermediate certificates.
• By enabling the "Do not compress certificate" option, you retain the entire certificate chain.

⚠️ This option ensures better compatibility with all browsers and systems.

Where can I find this option?

• When importing, check "Do not compress the certificate" in the form.

4. Update an existing certificate

Update steps

• Go to Organization > Certificates
• Locate the relevant certificate
• Click Update
• Import the new files

5. Certificate lifetime and expiration

• A TLS certificate is valid for a limited period (e.g., 1 year).
• Fasterize automatically alerts you when expiration is approaching.

⚠️ Remember to renew your certificate on time to avoid any interruption in service.

6. Request CSR generation (optional)

What is a CSR?

• CSR = Certificate Signing Request
• File used to request a certificate from a certification authority (CA)

Fasterize's approach

• Submit a request via support
• We generate the private key on our servers.
• We will send you the CSR file to forward to your authority.
• Once the certificate has been obtained, we will install it for you.

⚠️ The key must be between 1,024, 2,048, or 4,096 bits maximum.

Conclusion

With these steps, you can independently manage your TLS certificates on Fasterize. If you have any questions or specific needs (CSR, formats), our support team is always available to assist you.

‍