Configure SSL certificates for custom domains

To use SSL for Custom Domains with your App Engine applications, you must first Activate SSL for custom domains.

You will then need to upload and configure a public SSL certificate along with the corresponding private key. Please note, these must conform to the certificate and key requirements outlined in the corresponding App Engine documentation. Follow the instructions below to get your certificate and key configured.

Uploading a Certificate

  1. Sign in to the Google Admin console.
  2. Click Security > Advanced settings > (optional) Show more > SSL for Custom Domains where is it?
  3. Click Configure SSL certificates to go to the SSL Certificate Configuration page.
  4. Click Upload a new certificate.

  5. Choose the public certificate and private key you wish to upload.  
  6. Once you have selected a public certificate and private key, click Upload.

Configuring a Certificate

  1. After uploading the certificate and key, select a serving mode on the following page.

    The list displays the available serving methods depending upon whether you have a VIP or SNI certificate slots or both. The options provided will include: not serving, SNI only, or SNI + VIP: <a VIP number>. SNI + VIP will not make use of an SNI certificate slot; the certificate will simply be assigned to the VIP listed.

  2. Add any matching URLs to the certificate. Manually add matching URLs via the pulldown menu or add all of the matching URLs by clicking the Assign all matching URLs link.

    If you do not have any URLs to assign, you can add them by following the Using a Custom Domain documentation.
  3. Contact your DNS provider to change the CNAME record for your assigned URLs to the CNAME given in the CNAME to field while configuring the certificate. See Create a CNAME record for instructions.
  4. Click Save at the bottom of the page to save your changes.

See Billing and disabling SSL for custom domains for instructions on canceling SSL.