Staging environment (Beta)
Use your certificate staging environment to test new custom (modern) certificates before pushing them to your production environment. This process helps you solve potential certificate problems before there’s an incident, such as when:
- You make a mistake when uploading a new custom certificate.
- You misunderstand the order of your certificates.
- Clients have previously pinned your custom certificate, causing a TLS termination error.
Free | Pro | Business | Enterprise | |
---|---|---|---|---|
Availability | No | No | No | Yes (open beta) |
To upload custom (modern) certificates to your staging environment:
- Go to SSL/TLS > Staging Certificates.
- Select Upload Custom Staging Certificate.
- Upload your custom (modern) certificate (detailed instructions).
- Your certificate will appear in the dashboard with a status of Staging Deployment. If you refresh the page, its status should go to Staging Active.
Test your custom (modern) certificate by sending curl
requests to the IP addresses listed in the dashboard card at SSL/TLS > Staging Certificates:
You should confirm whether:
- TLS termination is successful.
- The right certificate is being served at the edge.
- Any clients are pinning the old certificate.
Assuming there are no issues, push your custom (modern) certificate to your production environment:
- Go to SSL/TLS > Staging Certificates.
- Select a custom certificate.
- Select Push to Production.
If there were issues with your certificate, you can keep it in your staging environment or select Deactivate on the certificate itself.
If you roll out a custom (modern) certificate to production and encounter issues, you can deactivate that certificate to delete the certificate from the edge and then push the certificate back to your staging environment for additional testing:
- Go to SSL/TLS > Edge Certificates.
- Select a custom certificate.
- Select Deactivate.
- Select Push to Staging.
Currently, staging environments are only available to Enterprise customers participating in an open beta. To get access to the beta, contact your Account team.
At the moment, staging environments have limited functionality:
- Only custom (modern) certificates
- Only accessed via the dashboard