Skip to main content

Credentials

Credentials store authentication information (username and password, API key, tokens, etc.) to connect with specific third-party apps and services.

On the access management page, you can centrally manage your credential information required for Certimate to access other services.

How to retrieve provider's credentials?​

Alibaba Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • AliyunDNSFullAccess
    • Use custom policy:
      • alidns:DescribeDomains
      • alidns:DescribeDomainRecords
      • alidns:AddDomainRecord
      • alidns:UpdateDomainRecord
      • alidns:DeleteDomainRecord
  • Deploy certificates:
    • Use system policy:
      • AliyunYundunCertFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • yundun-cert:ListUserCertificateOrder
      • yundun-cert:GetUserCertificateDetail
      • yundun-cert:UploadUserCertificate
      • Full access to the related services or resources.

Tencent Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • QcloudDNSPodFullAccess
    • Use custom policy:
      • dnspod:CreateRecord
      • dnspod:ModifyRecord
      • dnspod:DeleteRecord
  • Deploy certificates:
    • Use system policy:
      • QcloudSSLFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • ssl:DescribeCertificates
      • ssl:DescribeCertificate
      • ssl:DescribeCertificateDetail
      • ssl:UploadCertificate
      • Full access to the related services or resources.

Baidu Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • DNSOperatePolicy
    • Use custom policy:
      • bce:dns:READ
      • bce:dns:OPERATE
  • Deploy certificates:
    • Use system policy:
      • CASFullControlPolicy
      • Full access to the related services or resources.
    • Use custom policy:
      • bce:cas:FULL_CONTROL
      • Full access to the related services or resources.

Huawei Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • DNSFullAccess
    • Use custom policy:
      • dns:zone:list
      • dns:recordset:list
      • dns:recordset:get
      • dns:recordset:create
      • dns:recordset:update
      • dns:recordset:delete
  • Deploy certificates:
    • Use system policy:
      • SCMFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • scm:cert:list
      • scm:cert:get
      • scm:cert:download
      • scm:cert:upload
      • Full access to the related services or resources.

Volc Engine​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • DNSFullAccess
    • Use custom policy:
      • dns:ListZones
      • dns:CreateRecord
      • dns:UpdateRecord
      • dns:DeleteRecord
  • Deploy certificates:
    • Use system policy:
      • SSLFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • ImportCertificate
      • Full access to the related services or resources.

JD Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • JDCloudDomainServiceAdmin
    • Use custom polify:
      • domainservice:describeDomains
      • domainservice:describeResourceRecord
      • domainservice:createResourceRecord
      • domainservice:modifyResourceRecord
      • domainservice:deleteResourceRecord
  • Deploy certificates:
    • Use system policy:
      • JDCloudSSLAdmin
      • Full access to the related services or resources.
    • Use custom polify:
      • ssl:describeCerts
      • ssl:uploadCert
      • Full access to the related services or resources.

AWS​

Please refer to the official user manual。

Least privileges:

  • Request certificates (DNS-01 challenge):
    • route53:ListHostedZones
    • route53:ListHostedZonesByName
    • route53:GetHostedZone
    • route53:ListResourceRecordSets
    • route53:ChangeResourceRecordSets
    • route53:GetChange
  • Deploy certificates:
    • acm:ListCertificates
    • acm:GetCertificate
    • acm:ImportCertificate
    • Full access to the related services or resources.

Azure​

Please refer to the official user manual。

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Microsoft.Network/dnsZones/read
    • Microsoft.Network/dnsZones/TXT/*
  • Deploy certificates:
    • Microsoft.KeyVault/vaults/certificates/read
    • Microsoft.KeyVault/vaults/certificates/write
    • Full access to the related services or resources.

Cloudflare​

Please refer to the following process to obtain:

  1. Log in to the Cloudflare console.
  2. Click on the account avatar, then click on "My Profile" -> "API Tokens" -> "Create Token", and select to use the "Edit zone DNS" template.
  3. Add permission, fill in your domain names, then click the "Continue" button.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Zone / Zone / Read
    • Zone / DNS / Edit