Skip to main content

Certificate Services

Public Certificates

There are two main ways to use public certificates for DNS on the Modernisation Platform; ACM (Amazon Certificate Manager) public certificates, and Gandi.net certificates imported into ACM. Please see How to configure DNS for public services for more information.

Private Certificates

We provide a Private root Certificate Authority (CA) in the network services account and VPC, along with subordinate production and non production CAs.

The subordinate CA’s are then shared to the application environments via a Resource Access Manager (RAM) share (either production or non-production depending on the environment).

Certificates can then be created using the Private subordinate CA, the certificates remain local to the application environment.

Certificate Services

This page was last reviewed on 28 June 2024. It needs to be reviewed again on 28 December 2024 by the page owner #modernisation-platform .
This page was set to be reviewed before 28 December 2024 by the page owner #modernisation-platform. This might mean the content is out of date.