--- title: Load Balancer SSL Setup description: Configure SSL certificates for E2E Load Balancers, including manual import steps and private key requirements. --- # Load Balancer SSL Setup E2E Load Balancers support HTTPS traffic by handling SSL/TLS encryption at the Load Balancer level. This allows secure communication between users and your applications. To configure HTTPS, customers must provide an SSL certificate, its corresponding **private key**, and the **certificate chain**. These components allow the Load Balancer to establish a secure connection, validate the certificate, and serve encrypted traffic to end users. SSL configuration on the Load Balancer ensures: - Secure access to applications over HTTPS - Centralized certificate management instead of installing SSL on every backend server - Better performance and easier scaling - Consistent security policies across all incoming traffic ## Purchased SSL Certificates on E2E When an SSL certificate is purchased from E2E, the customer receives: - The signed SSL certificate - The intermediate/CA bundle The **private key is not included**, because: - It is generated locally during CSR creation - E2E does not store or handle private keys - Load Balancers need the private key to process HTTPS traffic Because of this, purchased SSL certificates **cannot be directly used** with Load Balancers and must be manually imported. ## When SSL Must Be Imported Manually You must import an SSL certificate manually in the following situations: - You want to enable HTTPS (port 443) on a Load Balancer - You purchased an SSL certificate from E2E (private key is not included) - You generated the CSR and private key locally and only you have the key - You need the certificate to appear in the Load Balancer’s SSL selection dropdown The Load Balancer can only use SSL certificates that are imported with all required components: - SSL Certificate - Private Key - Certificate Chain # Importing an SSL Certificate ## Step 1: Prepare SSL Files Required files: - Certificate (`.crt` / `.pem`) - Private key (`.key`) - Certificate chain (`.crt` / `.pem`) ## Step 2: Import SSL Certificate in MyAccount 1. Open **MyAccount** 2. Navigate to **Services → Certificate Manager** 3. Click **Import SSL Certificate** 4. Upload: - Certificate - Private Key - Certificate Chain After import, the certificate becomes available for Load Balancer selection. ## Step 3: Attach SSL to a Load Balancer 1. Go to **Compute → Load Balancer** 2. Select your Load Balancer 3. Add or edit a **HTTPS (443) listener** 4. Choose the imported SSL certificate 5. Save changes The Load Balancer will now handle HTTPS traffic using the imported SSL certificate. ## Important Notes - SSL certificates purchased from E2E must be imported manually because the private key is not included. - Only imported certificates appear in the Load Balancer SSL dropdown. ---