Skip to content

[ZT] Certificate limits #17929

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Nov 1, 2024
Merged

[ZT] Certificate limits #17929

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ec6bd31
Add limits in-line
maxvp Nov 1, 2024
4dcfd54
Add to account limits
maxvp Nov 1, 2024
83b04e1
Reword generated
maxvp Nov 1, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions src/content/docs/cloudflare-one/account-limits.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,14 @@ This page lists the default account limits for rules, applications, fields, and
| ----------------- | ----- |
| Tests per account | 10 |

## Certificates

| Feature | Limit |
| ------------------------------ | ----- |
| Active certificates | 25 |
| Certificates generated per day | 3 |
| Custom certificates | 5 |

## Maximum number of characters

| Feature | Character limit |
Expand Down
2 changes: 2 additions & 0 deletions .../connections/connect-devices/warp/user-side-certificates/custom-certificate.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,8 @@ Only available on Enterprise plans.

Enterprise customers who do not wish to install a [Cloudflare certificate](/cloudflare-one/connections/connect-devices/warp/user-side-certificates/manual-deployment/) have the option to upload their own root certificate to Cloudflare. This feature is sometimes referred to as Bring Your Own Public Key Infrastructure (BYOPKI). Gateway will use your uploaded certificate to encrypt all sessions between the end user and Gateway, enabling all HTTPS inspection features that previously required a Cloudflare certificate. You can upload multiple certificates to your account, but only one can be active at any given time. You also need to upload a private key to intercept domains with JIT certificates and to enable the [block page](/cloudflare-one/policies/gateway/block-page/).

You can upload up to five custom root certificates. If your organization requires more than five certificates, contact your account team.

:::caution
Custom certificates are limited to use between your users and the Gateway proxy. Connections between Gateway and the origin server will use a Cloudflare certificate.
:::
Expand Down
2 changes: 1 addition & 1 deletion ...loudflare-one/connections/connect-devices/warp/user-side-certificates/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ Each Zero Trust account can generate a new root certificate a maximum of three t
Zero Trust accounts using the Cloudflare certificate prior to September 2024 will need to redeploy and activate the newly generated certificate. Zero Trust accounts created during or after September 2024 will use an active certificate by default.
:::

Once a certificate is generated in or uploaded to Zero Trust, you need to activate it. Activating a certificate deploys it across the Cloudflare network.
Once a certificate is generated in or uploaded to Zero Trust, you need to activate it. Activating a certificate deploys it across the Cloudflare network. You can have up to 25 active certificates at once.

To activate your root certificate:

Expand Down
Loading