Skip to content

AWS Certificate Manager (ACM)

Short Summary: Import privately issued certificates into AWS ACM so they can be attached to ELBs/ALBs.

  • Private PKI in Cloud: Use certificates from your internal MSCA on public-facing ALBs.
  • Centralized Renewal: SSL-CLM renews the cert and automatically re-imports it to ACM.
  1. Navigate: Admin > Cert Stores > Add New.
  2. Select Provider: AWS ACM.
  3. Region: us-east-1.
  4. Credentials: IAM User with acm:ImportCertificate permissions.
  1. SSL-CLM issues a certificate (e.g., from MSCA).
  2. SSL-CLM calls acm:ImportCertificate with the Body, Private Key, and Chain.
  3. ACM returns an ARN (arn:aws:acm:...).
  4. You attach this ARN to your Load Balancer.