Skip to main content

Credentials

Credentials store authentication information (username and password, API key, tokens, etc.) to connect with specific third-party apps and services.

On the access management page, you can centrally manage your credential information required for Certimate to access other services.

Read the Providers guide to learn more details.

How to retrieve provider's credentials?​

Alibaba Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • AliyunDNSFullAccess
    • Use custom policy:
      • alidns:DescribeDomains
      • alidns:DescribeDomainRecords
      • alidns:AddDomainRecord
      • alidns:UpdateDomainRecord
      • alidns:DeleteDomainRecord
  • Deploy certificates:
    • Use system policy:
      • AliyunYundunCertFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • yundun-cert:ListUserCertificateOrder
      • yundun-cert:GetUserCertificateDetail
      • yundun-cert:UploadUserCertificate
      • Full access to the related services or resources.

Tencent Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • QcloudDNSPodFullAccess
    • Use custom policy:
      • dnspod:CreateRecord
      • dnspod:ModifyRecord
      • dnspod:DeleteRecord
  • Deploy certificates:
    • Use system policy:
      • QcloudSSLFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • ssl:DescribeCertificates
      • ssl:DescribeCertificate
      • ssl:DescribeCertificateDetail
      • ssl:UploadCertificate
      • Full access to the related services or resources.

Baidu Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • DNSOperatePolicy
    • Use custom policy:
      • bce:dns:READ
      • bce:dns:OPERATE
  • Deploy certificates:
    • Use system policy:
      • CASFullControlPolicy
      • Full access to the related services or resources.
    • Use custom policy:
      • bce:cas:FULL_CONTROL
      • Full access to the related services or resources.

Huawei Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • DNSFullAccess
    • Use custom policy:
      • dns:zone:list
      • dns:recordset:list
      • dns:recordset:get
      • dns:recordset:create
      • dns:recordset:update
      • dns:recordset:delete
  • Deploy certificates:
    • Use system policy:
      • SCMFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • scm:cert:list
      • scm:cert:get
      • scm:cert:download
      • scm:cert:upload
      • Full access to the related services or resources.

Volc Engine​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • DNSFullAccess
    • Use custom policy:
      • dns:ListZones
      • dns:CreateRecord
      • dns:UpdateRecord
      • dns:DeleteRecord
  • Deploy certificates:
    • Use system policy:
      • SSLFullAccess
      • Full access to the related services or resources.
    • Use custom policy:
      • ImportCertificate
      • Full access to the related services or resources.

JD Cloud​

Please refer to the official user manual.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Use system policy:
      • JDCloudDomainServiceAdmin
    • Use custom polify:
      • domainservice:describeDomains
      • domainservice:describeResourceRecord
      • domainservice:createResourceRecord
      • domainservice:modifyResourceRecord
      • domainservice:deleteResourceRecord
  • Deploy certificates:
    • Use system policy:
      • JDCloudSSLAdmin
      • Full access to the related services or resources.
    • Use custom polify:
      • ssl:describeCerts
      • ssl:uploadCert
      • Full access to the related services or resources.

AWS​

Please refer to the official user manual。

Least privileges:

  • Request certificates (DNS-01 challenge):
    • route53:ListHostedZones
    • route53:ListHostedZonesByName
    • route53:GetHostedZone
    • route53:ListResourceRecordSets
    • route53:ChangeResourceRecordSets
    • route53:GetChange
  • Deploy certificates:
    • acm:ListCertificates
    • acm:GetCertificate
    • acm:ImportCertificate
    • Full access to the related services or resources.

Azure​

Please refer to the official user manual。

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Microsoft.Network/dnsZones/read
    • Microsoft.Network/dnsZones/TXT/*
  • Deploy certificates:
    • Microsoft.KeyVault/vaults/certificates/read
    • Microsoft.KeyVault/vaults/certificates/write
    • Full access to the related services or resources.

Cloudflare​

Please refer to the following process to obtain:

  1. Log in to the Cloudflare console.
  2. Click on the account avatar, then click on "My Profile" -> "API Tokens" -> "Create Token", and select to use the "Edit zone DNS" template.
  3. Add permission, fill in your domain names, then click the "Continue" button.

Least privileges:

  • Request certificates (DNS-01 challenge):
    • Zone / Zone / Read
    • Zone / DNS / Edit