.TH "GCLOUD_COMPUTE_SSL\-CERTIFICATES_CREATE" 1



.SH "NAME"
.HP
gcloud compute ssl\-certificates create \- create a Compute Engine SSL certificate



.SH "SYNOPSIS"
.HP
\f5gcloud compute ssl\-certificates create\fR \fINAME\fR (\fB\-\-domains\fR=\fIDOMAIN\fR,[\fIDOMAIN\fR,...]\ |\ \fB\-\-certificate\fR=\fILOCAL_FILE_PATH\fR\ \fB\-\-private\-key\fR=\fILOCAL_FILE_PATH\fR) [\fB\-\-description\fR=\fIDESCRIPTION\fR] [\fB\-\-global\fR\ |\ \fB\-\-region\fR=\fIREGION\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fBgcloud compute ssl\-certificates create\fR creates SSL certificate resources,
which you can use in a target HTTPS or target SSL proxy. An SSL certificate
resource consists of a certificate and private key. The private key is encrypted
before it is stored.

You can create either a managed or a self\-managed SslCertificate resource. A
managed SslCertificate is provisioned and renewed for you. A self\-managed
certificate is created by passing the certificate obtained from Certificate
Authority through \f5\-\-certificate\fR and \f5\-\-private\-key\fR flags.



.SH "EXAMPLES"

To create a self\-managed certificate resource 'my\-cert' from a certificate
placed under path 'foo/cert' and a private key placed under path 'foo/pk', run:

.RS 2m
$ gcloud compute ssl\-certificates create my\-cert \e
  \-\-certificate=foo/cert \-\-private\-key=foo/pk
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fINAME\fR

Name of the SSL certificate to create.


.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

Flags for managed or self\-managed certificate.

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-domains\fR=\fIDOMAIN\fR,[\fIDOMAIN\fR,...]

List of domains to create a managed certificate for.

.TP 2m

Flags for self\-managed certificate


.RS 2m
.TP 2m
\fB\-\-certificate\fR=\fILOCAL_FILE_PATH\fR

Path to a local certificate file to create a self\-managed certificate. The
certificate must be in PEM format. The certificate chain must be no greater than
5 certs long. The chain must include at least one intermediate cert.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-private\-key\fR=\fILOCAL_FILE_PATH\fR

Path to a local private key file. The private key must be in PEM format and must
use RSA or ECDSA encryption.

This flag argument must be specified if any of the other arguments in this group
are specified.


.RE
.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-description\fR=\fIDESCRIPTION\fR

An optional, textual description for the SSL certificate.

.TP 2m

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-global\fR

If set, the SSL certificate is global.

.TP 2m
\fB\-\-region\fR=\fIREGION\fR

Region of the SSL certificate to create. If not specified, you might be prompted
to select a region (interactive mode only).

To avoid prompting when this flag is omitted, you can set the
\f5\fIcompute/region\fR\fR property:

.RS 2m
$ gcloud config set compute/region REGION
.RE

A list of regions can be fetched by running:

.RS 2m
$ gcloud compute regions list
.RE

To unset the property, run:

.RS 2m
$ gcloud config unset compute/region
.RE

Alternatively, the region can be stored in the environment variable
\f5\fICLOUDSDK_COMPUTE_REGION\fR\fR.


.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha compute ssl\-certificates create
.RE

.RS 2m
$ gcloud beta compute ssl\-certificates create
.RE