Prerequisite

• Have an existing trusted certificate and corresponding private keys.
• Your business does not require to replace the certificates frequently or renewing the certificates automatically.

Note:

• If you upload and replace EonKube's self-signed certificate, you will not be able to manage and renew the certificate through cert-manager. You need to manage the certificate manually.
• If your certificates need to be renewed regularly, this approach will increase the workload of manual management.

Procedure

1. Upload the certificate to create a Secret:
   1. Go to EonKube > User > Advanced > Storage > Secrets.
   2. Click Create.
   3. Select TLS Certificate.
   4. Choose a namespace and specify an identifying name for this Secret.
   5. At the bottom of Certificate, click Read for File.
   6. Select the certificate file from your computer and click Open.
   7. Click Create.
2. Replace the EonKube self-signed certificate:
   1. Go to the cattle-system namespace. On the left pane, Service Discovery > Ingresses. Find the Secret that you just created.
   2. Click ⋮ and select Edit YAML.
   3. Delete the following annotations:

      cert-manager.io/issuer: rancher
      cert-manager.io/issuer-kind: Issuer

   4. Find the tls field. Enter the host name and the secret name.
   5. Save the settings.