[{"data":1,"prerenderedAt":366},["ShallowReactive",2],{"docs-deploy-server":3,"docs-nav":321},{"id":4,"title":5,"body":6,"category":307,"dateModified":308,"datePublished":309,"description":70,"draft":310,"extension":311,"icon":308,"meta":312,"navigation":313,"order":314,"path":315,"seo":316,"sitemap":317,"stem":318,"summary":319,"__hash__":320},"docs\u002Fdocs\u002Fdeploy-server.md","服务器部署客户端安装与使用",{"type":7,"value":8,"toc":288},"minimark",[9,13,17,30,33,36,41,44,56,63,74,79,87,92,100,103,107,110,116,119,122,142,145,205,208,211,214,223,226,229,243,246,249,253,267,271,274,278,281,285],[10,11,12],"h2",{"id":12},"功能概述",[14,15,16],"p",{},"部署客户端（sslClient）是一个轻量级守护进程，安装在你的服务器上，负责：",[18,19,20,24,27],"ul",{},[21,22,23],"li",{},"接收平台推送的证书文件并写入指定路径",[21,25,26],{},"自动重载 Web 服务（Nginx、Apache、Tomcat、IIS 等）",[21,28,29],{},"续签成功后自动替换新证书，无需手动干预",[14,31,32],{},"支持系统：Linux（amd64 \u002F arm64 \u002F armv7）、Windows（amd64）。",[10,34,35],{"id":35},"安装部署客户端",[37,38,40],"h3",{"id":39},"方式一通过部署向导安装推荐","方式一：通过部署向导安装（推荐）",[14,42,43],{},"在控制台「证书列表」页点击「部署」，选择「普通服务器」分支：",[45,46,47,50,53],"ol",{},[21,48,49],{},"选择「新服务器」，填写服务器名称（如「阿里云ECS-web01」）",[21,51,52],{},"点击「创建并生成安装命令」",[21,54,55],{},"系统生成一行安装命令，复制到服务器终端执行即可",[14,57,58,62],{},[59,60,61],"strong",{},"Linux 安装命令","：",[64,65,71],"pre",{"className":66,"code":68,"language":69,"meta":70},[67],"language-bash","curl -fsSL https:\u002F\u002Fssl.hiofd.com\u002Fssl_client\u002Finstall.sh | sudo bash -s -- -t \u003Cyour-token>\n","bash","",[72,73,68],"code",{"__ignoreMap":70},[14,75,76,62],{},[59,77,78],{},"Windows PowerShell 安装命令",[64,80,85],{"className":81,"code":83,"language":84,"meta":70},[82],"language-powershell","$env:SSL_CLIENT_TOKEN=\"\u003Cyour-token>\"; irm https:\u002F\u002Fssl.hiofd.com\u002Fssl_client\u002Finstall.ps1 | iex\n","powershell",[72,86,83],{"__ignoreMap":70},[14,88,89,62],{},[59,90,91],{},"Windows CMD 安装命令",[64,93,98],{"className":94,"code":96,"language":97,"meta":70},[95],"language-cmd","curl -fsSL https:\u002F\u002Fssl.hiofd.com\u002Fssl_client\u002Finstall.cmd -o install.cmd && install.cmd -t \u003Cyour-token>\n","cmd",[72,99,96],{"__ignoreMap":70},[14,101,102],{},"执行后约 10 秒内客户端自动连接平台，向导中显示「在线」状态。",[37,104,106],{"id":105},"方式二选择已有服务器","方式二：选择已有服务器",[14,108,109],{},"如果之前已安装过客户端，在部署向导中选择「已有服务器」，从列表中选取即可复用，无需重复安装。",[111,112,113],"blockquote",{},[14,114,115],{},"同一台服务器可部署多张证书，直接复用客户端即可。",[10,117,118],{"id":118},"配置部署规则",[14,120,121],{},"客户端安装完成后，在部署向导中配置证书写入规则：",[45,123,124,130,136],{},[21,125,126,129],{},[59,127,128],{},"选择服务器类型","：Nginx \u002F Apache \u002F Tomcat \u002F IIS \u002F 其他",[21,131,132,135],{},[59,133,134],{},"填写证书路径","：证书文件和私钥在服务器上的存放路径",[21,137,138,141],{},[59,139,140],{},"配置重载命令","（可选）：证书写入后执行的服务重载命令",[14,143,144],{},"常用重载命令参考：",[146,147,148,161],"table",{},[149,150,151],"thead",{},[152,153,154,158],"tr",{},[155,156,157],"th",{},"服务",[155,159,160],{},"重载命令",[162,163,164,175,185,195],"tbody",{},[152,165,166,170],{},[167,168,169],"td",{},"Nginx",[167,171,172],{},[72,173,174],{},"nginx -s reload",[152,176,177,180],{},[167,178,179],{},"Apache",[167,181,182],{},[72,183,184],{},"systemctl reload httpd",[152,186,187,190],{},[167,188,189],{},"Tomcat",[167,191,192],{},[72,193,194],{},"systemctl restart tomcat",[152,196,197,200],{},[167,198,199],{},"Caddy",[167,201,202],{},[72,203,204],{},"systemctl reload caddy",[10,206,207],{"id":207},"执行部署",[14,209,210],{},"配置完成后点击「执行部署」，平台将证书文件推送到客户端，客户端写入指定路径并执行重载命令。部署过程实时显示进度和结果。",[10,212,213],{"id":213},"续签后自动部署",[14,215,216,217,222],{},"开启",[218,219,221],"a",{"href":220},"\u002Fdocs\u002Fauto-renew","自动续签","后，证书续签成功时会自动触发已配置的部署规则，将新证书推送到服务器并重载服务，实现「续签 → 部署」全链路自动化。",[10,224,225],{"id":225},"客户端管理",[14,227,228],{},"客户端管理入口统一在控制台「证书列表」页「我的证书」的操作列：点击目标证书的「部署」打开部署概览，即可：",[18,230,231,234,237,240],{},[21,232,233],{},"查看客户端在线\u002F离线状态（卡片右上角指示器）",[21,235,236],{},"修改服务器名称（悬停卡片浮现的铅笔图标）",[21,238,239],{},"查看\u002F编辑该证书关联的部署配置（证书路径、重载命令等）",[21,241,242],{},"手动触发立即部署",[14,244,245],{},"概览顶部「添加服务器」（或空态的「部署到服务器」）打开部署向导：新建服务器时生成安装命令；「已有服务器」列表可查看每台客户端的在线状态，点击对应行的「安装命令」可查看\u002F复制（用于重装）。",[10,247,248],{"id":248},"常见问题",[37,250,252],{"id":251},"客户端显示离线","客户端显示离线？",[18,254,255,258,261],{},[21,256,257],{},"检查服务器是否能访问外网（客户端需要连接平台服务端）",[21,259,260],{},"检查防火墙是否放行出站连接",[21,262,263,264],{},"在服务器上重启客户端：",[72,265,266],{},"sudo systemctl restart sslClient",[37,268,270],{"id":269},"部署失败权限不足","部署失败：权限不足",[14,272,273],{},"客户端进程需要有权写入证书路径和执行重载命令。建议以 root 或 sudo 权限安装，或确保证书目录对客户端用户可写。",[37,275,277],{"id":276},"如何更新客户端版本","如何更新客户端版本？",[14,279,280],{},"重新执行安装命令即可，脚本会自动检测已安装版本并执行升级（停止旧进程 → 备份 → 下载新版 → 替换 → 启动）。",[37,282,284],{"id":283},"一台服务器可以部署多张证书吗","一台服务器可以部署多张证书吗？",[14,286,287],{},"可以。同一个客户端可以关联多条部署配置，每条配置对应一张证书和一组写入路径。在部署向导中选择已有服务器后，为不同证书分别配置即可。",{"title":70,"searchDepth":289,"depth":290,"links":291},2,3,[292,293,297,298,299,300,301],{"id":12,"depth":289,"text":12},{"id":35,"depth":289,"text":35,"children":294},[295,296],{"id":39,"depth":290,"text":40},{"id":105,"depth":290,"text":106},{"id":118,"depth":289,"text":118},{"id":207,"depth":289,"text":207},{"id":213,"depth":289,"text":213},{"id":225,"depth":289,"text":225},{"id":248,"depth":289,"text":248,"children":302},[303,304,305,306],{"id":251,"depth":290,"text":252},{"id":269,"depth":290,"text":270},{"id":276,"depth":290,"text":277},{"id":283,"depth":290,"text":284},"部署与续签",null,"2026-09-09",false,"md",{},true,4,"\u002Fdocs\u002Fdeploy-server",{"title":5,"description":70},{"loc":315},"docs\u002Fdeploy-server","通过部署客户端（sslClient）实现证书自动写入服务器并重载 Nginx\u002FApache 等服务，支持 Linux 与 Windows，一行命令安装。","n3HiS8FdKaiDePAaD4oa4g1zneqOyl_cf42cyuwjPcg",[322,325,329,333,337,340,344,347,350,351,354,357,360,363],{"path":220,"title":323,"category":307,"order":324},"SSL证书自动续签配置",5,{"path":326,"title":327,"category":307,"order":328},"\u002Fdocs\u002Fcert-download","证书下载与格式说明",1,{"path":330,"title":331,"category":332,"order":290},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":334,"title":335,"category":307,"order":336},"\u002Fdocs\u002Fcloud-credential","云平台凭证配置指南",6,{"path":338,"title":339,"category":332,"order":289},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":341,"title":342,"category":343,"order":324},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传","申请与验证",{"path":345,"title":346,"category":307,"order":290},"\u002Fdocs\u002Fdeploy-cloud","一键部署到阿里云 CDN\u002FESA",{"path":348,"title":349,"category":307,"order":289},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":315,"title":5,"category":307,"order":314},{"path":352,"title":353,"category":343,"order":328},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解",{"path":355,"title":356,"category":332,"order":328},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":358,"title":359,"category":343,"order":289},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",{"path":361,"title":362,"category":343,"order":314},"\u002Fdocs\u002Fip-certificate","IP 地址证书申请指南",{"path":364,"title":365,"category":343,"order":290},"\u002Fdocs\u002Fwildcard","通配符证书申请",1789011271295]