Skip to content

Cloudflare

  1. In the TLS Protect Cloud toolbar, click Machines.
  2. Click the checkbox next to the Cloudflare machine where you'll install the certificate.
  3. Click Provision a certificate.

  4. From the Choose a certificate from the inventory field, begin typing the certificate name you want to provision. Click the certificate when you see it listed.

    Verify that you've selected the correct certificate by reviewing the Subject DN, Validity, and Fingerprint.

    Note

    The provisioned certificate must be associated with the zone name. A "zone" in Cloudflare usually corresponds to a DNS zone file containing DNS records for a particular domain. Ensure that the selected certificate matches the zone name.

  5. In the Zone field, enter the Cloudflare zone name that you will retrieve from your Cloudflare account.

  6. (Optional) In the Description field, you can optionally enter a machine installation description.

  7. In the Bundle Method field, select the appropriate bundle methodology (User Defined, Modern, or Compatible).

    Tip

    • User Defined: This method allows you to paste your own certificate chain and present that bundle to clients. You must specify any intermediates you wish to use, followed by the leaf. If you are using a self-signed certificate, you must use this mode.
    • Modern: This method consists of attempts to make the chain as efficient as possible, often using newer or fewer intermediate certificates.
    • Compatible: This is the default method, which uses common and well-distributed intermediate certificates to complete the chain. This ensures the resulting bundle is compatible with as many clients as possible.

  8. If you don't want the certificate to be pushed when you save, toggle the Push upon saving slider to No.

    Note

    When you provision a certificate without pushing it, Cloudflare does not assign a certificate ID. This certificate ID is only assigned after you have pushed the certificate. Therefore, you can only create a new installation for the same zone once all existing installations for that zone have been pushed.

  9. Click Save.

    Want to schedule your provisions?

    Schedule your provisions daily, weekly, or monthly. Learn more

After saving, the certificate is pushed to the Cloudflare website that Cloudflare manages, and an installation is created on the Installations tab.