Overview

Use F5 NGINXaaS for Google Cloud (NGINXaaS) to secure traffic by adding SSL/TLS certificates to a deployment.

Supported certificate types and formats

NGINX supports the following certificate formats:

• PEM format certificates.

You can upload these certificates as text, as files, or as secrets from Secret Manager.

Encrypt your certificates, keys, and PEM files using one of these standards:

• RSA
• ECC/ECDSA

Add SSL/TLS certificates

NGINXaaS supports two ways to manage your certificates and keys securely:

NGINXaaS console: Manage certificates alongside the NGINX configurations that reference them. See Add certificates using the NGINXaaS Console.

Google Secret Manager: Fetch secrets directly from Secret Manager, keeping credentials within Google Cloud. See Add certificates from Secret Manager.

Certificate rotation

NGINXaaS supports automatic and manual rotation for Secret Manager certificates:

Automatic rotation: Let NGINXaaS pick up new certificate versions automatically with no configuration changes needed. See Rotate a Secret Manager certificate (automatic).

Manual rotation: When you need to update certificates immediately, use Reapply Configuration in the console to refetch secrets right away. See Rotate a Secret Manager certificate (manual).