[{"data":1,"prerenderedAt":441},["ShallowReactive",2],{"docs-cloud-credential":3,"docs-nav":395},{"id":4,"title":5,"body":6,"category":381,"dateModified":382,"datePublished":383,"description":362,"draft":384,"extension":385,"icon":382,"meta":386,"navigation":387,"order":388,"path":389,"seo":390,"sitemap":391,"stem":392,"summary":393,"__hash__":394},"docs\u002Fdocs\u002Fcloud-credential.md","云平台凭证配置指南",{"type":7,"value":8,"toc":361},"minimark",[9,13,17,45,51,54,109,114,117,122,181,185,205,209,212,226,231,234,260,263,266,311,314,317,321,332,336,339,347,351,354,358],[10,11,12],"h2",{"id":12},"为什么需要云平台凭证",[14,15,16],"p",{},"云平台凭证（Cloud Credential）是你在云厂商的 API 访问密钥，平台通过它代你完成：",[18,19,20,33,39],"ul",{},[21,22,23,27,28,32],"li",{},[24,25,26],"strong",{},"DNS 验证自动化","：自动添加\u002F删除 ",[29,30,31],"code",{},"_acme-challenge"," TXT 记录，无需手动登录 DNS 面板",[21,34,35,38],{},[24,36,37],{},"证书一键部署","：通过云 API 将证书推送到 CDN\u002FESA 等产品",[21,40,41,44],{},[24,42,43],{},"自动续签","：续签时自动完成 DNS 验证，实现全程免维护",[46,47,48],"blockquote",{},[14,49,50],{},"不配置凭证也可以正常使用平台，但 DNS 验证需手动添加记录，自动续签功能不可用。",[10,52,53],{"id":53},"支持的云厂商",[55,56,57,73],"table",{},[58,59,60],"thead",{},[61,62,63,67,70],"tr",{},[64,65,66],"th",{},"云厂商",[64,68,69],{},"凭证类型",[64,71,72],{},"用途",[74,75,76,88,99],"tbody",{},[61,77,78,82,85],{},[79,80,81],"td",{},"阿里云",[79,83,84],{},"AccessKey ID + AccessKey Secret",[79,86,87],{},"DNS 解析自动验证、CDN\u002FESA 证书部署",[61,89,90,93,96],{},[79,91,92],{},"腾讯云",[79,94,95],{},"SecretId + SecretKey",[79,97,98],{},"DNS 解析自动验证",[61,100,101,104,107],{},[79,102,103],{},"华为云",[79,105,106],{},"AK + SK",[79,108,98],{},[46,110,111],{},[14,112,113],{},"更多云厂商持续接入中。",[10,115,116],{"id":116},"配置步骤",[118,119,121],"h3",{"id":120},"_1-获取云厂商-api-凭证","1. 获取云厂商 API 凭证",[18,123,124,159],{},[21,125,126,128,129],{},[24,127,81],{},"：",[130,131,132,142,145,156],"ol",{},[21,133,134,135],{},"登录",[136,137,141],"a",{"href":138,"rel":139},"https:\u002F\u002Fram.console.aliyun.com\u002F",[140],"nofollow","阿里云 RAM 控制台",[21,143,144],{},"创建 RAM 用户（建议专用子账号，不使用主账号 AK）",[21,146,147,148,151,152,155],{},"为 RAM 用户授权：",[29,149,150],{},"AliyunDNSFullAccess","（DNS 解析）+ ",[29,153,154],{},"AliyunCDNFullAccess","（CDN 部署，按需）",[21,157,158],{},"创建 AccessKey，记录 AccessKey ID 和 AccessKey Secret",[21,160,161,128,163],{},[24,162,92],{},[130,164,165,172,178],{},[21,166,134,167],{},[136,168,171],{"href":169,"rel":170},"https:\u002F\u002Fconsole.cloud.tencent.com\u002Fcam",[140],"腾讯云 CAM 控制台",[21,173,174,175],{},"创建子账号并授权 ",[29,176,177],{},"QcloudDNSPodFullAccess",[21,179,180],{},"创建 API 密钥，记录 SecretId 和 SecretKey",[118,182,184],{"id":183},"_2-在平台添加凭证","2. 在平台添加凭证",[130,186,187,190,193,196,199,202],{},[21,188,189],{},"进入控制台「证书管理 → 服务商凭证」",[21,191,192],{},"点击「新增凭证」",[21,194,195],{},"选择云厂商，填写凭证名称（便于识别，如「阿里云-主账号」）",[21,197,198],{},"填入 AccessKey ID \u002F Secret（或 SecretId \u002F SecretKey）",[21,200,201],{},"点击「验证」测试凭证有效性",[21,203,204],{},"验证通过后保存",[118,206,208],{"id":207},"_3-授权-dns-解析权限","3. 授权 DNS 解析权限",[14,210,211],{},"凭证添加后，系统会显示「云解析权限」状态：",[18,213,214,220],{},[21,215,216,219],{},[24,217,218],{},"已授权","：凭证对目标域名有 DNS 解析管理权限，可自动添加验证记录",[21,221,222,225],{},[24,223,224],{},"未授权","：凭证有效但缺少 DNS 权限，需补充授权",[46,227,228],{},[14,229,230],{},"如果凭证仅用于 CDN 证书部署（不做 DNS 验证），「未授权」状态不影响使用。",[10,232,233],{"id":233},"凭证安全建议",[18,235,236,242,248,254],{},[21,237,238,241],{},[24,239,240],{},"使用子账号","：不要用云厂商主账号的 AK，创建专用 RAM\u002FCAM 子账号",[21,243,244,247],{},[24,245,246],{},"最小权限","：只授予 DNS 解析和 CDN 证书管理所需的最小权限",[21,249,250,253],{},[24,251,252],{},"定期轮换","：建议定期更换 AccessKey，更新平台凭证",[21,255,256,259],{},[24,257,258],{},"不要泄露","：AccessKey Secret 仅在添加时填写一次，平台加密存储，不会明文展示",[10,261,262],{"id":262},"凭证与证书关联",[14,264,265],{},"配置凭证后，在以下场景选择关联：",[55,267,268,278],{},[58,269,270],{},[61,271,272,275],{},[64,273,274],{},"场景",[64,276,277],{},"关联方式",[74,279,280,288,295,303],{},[61,281,282,285],{},[79,283,284],{},"申请证书时自动 DNS 验证",[79,286,287],{},"在验证面板选择「自动模式」并选取凭证",[61,289,290,292],{},[79,291,43],{},[79,293,294],{},"在自动续签配置中选择关联凭证",[61,296,297,300],{},[79,298,299],{},"手动续签",[79,301,302],{},"续签时可选择关联凭证自动完成验证",[61,304,305,308],{},[79,306,307],{},"云平台部署",[79,309,310],{},"部署向导中选择凭证对应的云产品域名",[14,312,313],{},"一个凭证可以关联多张证书，多张证书也可以共用同一个凭证。",[10,315,316],{"id":316},"常见问题",[118,318,320],{"id":319},"凭证验证失败","凭证验证失败？",[18,322,323,326,329],{},[21,324,325],{},"检查 AccessKey ID \u002F Secret 是否填写正确（注意前后无空格）",[21,327,328],{},"确认 RAM\u002FCAM 子账号已授权对应权限",[21,330,331],{},"确认凭证未被云厂商禁用或删除",[118,333,335],{"id":334},"域名-dns-不在已配置的云厂商怎么办","域名 DNS 不在已配置的云厂商怎么办？",[14,337,338],{},"如果域名 DNS 托管在其他服务商（如 Cloudflare、DNSPod 独立版），暂不支持自动 DNS 验证。你可以：",[18,340,341,344],{},[21,342,343],{},"将域名 DNS 迁移到已支持的云厂商",[21,345,346],{},"继续使用手动 DNS 验证（每次续签需手动添加记录）",[118,348,350],{"id":349},"凭证过期或轮换后如何更新","凭证过期或轮换后如何更新？",[14,352,353],{},"在「服务商凭证」页面点击「编辑」，填入新的 AccessKey 即可。已关联的证书自动续签配置无需重新设置，续签时会使用更新后的凭证。",[118,355,357],{"id":356},"删除凭证会影响已签发的证书吗","删除凭证会影响已签发的证书吗？",[14,359,360],{},"不会。已签发的证书不受影响。但关联该凭证的自动续签任务会失败，建议在删除前先更换为其他有效凭证。",{"title":362,"searchDepth":363,"depth":364,"links":365},"",2,3,[366,367,368,373,374,375],{"id":12,"depth":363,"text":12},{"id":53,"depth":363,"text":53},{"id":116,"depth":363,"text":116,"children":369},[370,371,372],{"id":120,"depth":364,"text":121},{"id":183,"depth":364,"text":184},{"id":207,"depth":364,"text":208},{"id":233,"depth":363,"text":233},{"id":262,"depth":363,"text":262},{"id":316,"depth":363,"text":316,"children":376},[377,378,379,380],{"id":319,"depth":364,"text":320},{"id":334,"depth":364,"text":335},{"id":349,"depth":364,"text":350},{"id":356,"depth":364,"text":357},"部署与续签",null,"2026-09-09",false,"md",{},true,6,"\u002Fdocs\u002Fcloud-credential",{"title":5,"description":362},{"loc":389},"docs\u002Fcloud-credential","如何配置阿里云、腾讯云等云平台 API 凭证，实现 DNS 验证自动化与证书一键部署，是自动续签的前提条件。","hxympT46CIDNi7VnnIACUoeOnpOPPmpquP7gnDCXWAA",[396,400,404,408,409,412,416,419,422,426,429,432,435,438],{"path":397,"title":398,"category":381,"order":399},"\u002Fdocs\u002Fauto-renew","SSL证书自动续签配置",5,{"path":401,"title":402,"category":381,"order":403},"\u002Fdocs\u002Fcert-download","证书下载与格式说明",1,{"path":405,"title":406,"category":407,"order":364},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":389,"title":5,"category":381,"order":388},{"path":410,"title":411,"category":407,"order":363},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":413,"title":414,"category":415,"order":399},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传","申请与验证",{"path":417,"title":418,"category":381,"order":364},"\u002Fdocs\u002Fdeploy-cloud","一键部署到阿里云 CDN\u002FESA",{"path":420,"title":421,"category":381,"order":363},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":423,"title":424,"category":381,"order":425},"\u002Fdocs\u002Fdeploy-server","服务器部署客户端安装与使用",4,{"path":427,"title":428,"category":415,"order":403},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解",{"path":430,"title":431,"category":407,"order":403},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":433,"title":434,"category":415,"order":363},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",{"path":436,"title":437,"category":415,"order":425},"\u002Fdocs\u002Fip-certificate","IP 地址证书申请指南",{"path":439,"title":440,"category":415,"order":364},"\u002Fdocs\u002Fwildcard","通配符证书申请",1789011271295]