Configure SSL certificates for custom domains

This feature will be moving to the Google Developers Console by the end of August 2015. To configure your custom domain name using the Google Developers Console, refer to Google Cloud Platform documentation. Permissions are stricter for setting up domain access using the Google Developers Console. In the Google Admin console domain administrators can add URLs from their domain to any App Engine project for which they have the project ID. In the Google Developers Console domain administrators can only add URLs from their domain to App Engine projects for which they are editors or owners. Learn more about Configuring your App's Authentication. Follow these instructions to get the new permissions you’ll need.

To use SSL for custom domains with your App Engine applications, you need to:

  1. Activate SSL for custom domains.
  2. Upload and configure a public SSL certificate along with the corresponding private key.

    Note: These must conform to the certificate and key requirements outlined in the corresponding App Engine documentation. Follow the instructions below to configure your certificate and key.

Upload a certificate

  1. Sign in to the Google Admin console.
  2. Click Security > Advanced settings > (optional) Show more > SSL for Custom Domains where is it?
  3. Click Configure SSL certificates to go to the SSL Certificate Configuration page.
  4. On the SSL Certificate configuration page > New certificate section, click Upload.

  5. Choose the public certificate and private key you wish to upload.  
  6. Once you have selected a public certificate and private key, click Upload.

Configure a certificate

Once you’ve uploaded the certificate and key, you can configure the certificate:

  1. Select a serving mode.

    The drop-down list displays the available serving methods depending upon whether you have a VIP or SNI certificate slots, or both. The options include Not serving, SNI only, or SNI + VIP: <a VIP number>. SNI + VIP doesn't make use of an SNI certificate slot; the certificate is assigned to the VIP listed.

  2. Add any matching URLs to the certificate. Click the Assign all matching URLs link to add the matching URLs, or you can manually add matching URLs via the drop-down menu.

    If you don't have any URLs to assign, you can add them by following the Using a Custom Domain documentation.
  3. Contact your DNS provider to change the CNAME record for your assigned URLs to the CNAME given in the CNAME to field while configuring the certificate. See Add a CNAME record.
  4. Click Save.

Learn more about canceling SSL in Billing and disabling SSL for custom domains.

Was this article helpful?