# Add certificates using Terraform

Type of document: How-to guide
Product: NGINXaaS for Azure

---


## Overview

You can manage SSL/TLS certificates for F5 NGINXaaS for Azure (NGINXaaS) using Terraform.

## Prerequisites

- Confirm that you meet the [NGINXaaS Prerequisites](/nginxaas-azure/getting-started/prerequisites.md).
- [Authenticate Terraform to Azure](https://learn.microsoft.com/en-us/azure/developer/terraform/authenticate-to-azure)
- [Install Terraform](https://learn.hashicorp.com/tutorials/terraform/install)

**Note:**  The examples in the NGINXaaS for Azure Snippets GitHub repository use the prerequisites module [available in the same repository](https://github.com/nginxinc/nginxaas-for-azure-snippets/tree/main/terraform/prerequisites).

## Upload and manage a certificate

You can find examples of Terraform configurations in the [NGINXaaS for Azure Snippets GitHub repository](https://github.com/nginxinc/nginxaas-for-azure-snippets/tree/main/terraform/certificates)

To create a deployment, add a certificate, and use it in a configuration, run the following commands:

   ```shell
   terraform init
   terraform plan
   terraform apply --auto-approve
   ```

## Delete a deployment

Once the deployment is no longer needed, run the following to clean up the deployment and related resources:

   ```shell
   terraform destroy --auto-approve
   ```

## Additional resources

- [Terraform NGINX certificate documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/nginx_certificate)

- [NGINXaaS Managed Identity Documentation](/nginxaas-azure/getting-started/managed-identity-portal.md)
- [NGINXaaS Azure Monitor Documentation](/nginxaas-azure/monitoring/enable-metrics.md)