---
schema_version: "1"
id: f88ff572833293a6d91d45056615bab216f551a8a5e5864176b3d3b499e9440f
title: Add a Self-Managed SSL Certificate for B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_add_self_managed_ssl_certificates.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_add_self_managed_ssl_certificates.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 936dd78e23ea06ba8b04d76197fbfa611138ce21dc67fd77bca9521f40a23303
description: Add a self-managed SSL certificate to a hostname for a zone, validate it, and map DNS so the hostname's traffic routes to its zone. You upload and renew self-managed certificates yourself.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Add a Self-Managed SSL Certificate for B2C Commerce

Add a self-managed SSL certificate to a hostname for a zone, validate it, and map DNS so the hostname's traffic routes to its zone. You upload and renew self-managed certificates yourself.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/images/icon_note.png)

Note Self-managed SSL certificates aren't available on SCAPI zones. Salesforce manages the SCAPI hostname and certificates. See [SCAPI Zone Support for B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_scapi_zone.htm&release=264.0.0&type=5 "A SCAPI zone is the Salesforce-managed eCDN zone that fronts Salesforce Commerce API (SCAPI) traffic. Starting with B2C Commerce 26.10, the Production instance includes a subset of eCDN security controls and analytics for this zone in Business Manager and the CDN API, with no support case required.").

[Which Salesforce Commerce Product Do I Have?](https://help.salesforce.com/s/articleView?id=commerce.comm_what_product.htm&language=en_US)

For the DNS mapping rules, validation methods, and certificate limits, see [DNS Mapping for eCDN Zones](https://help.salesforce.com/s/articleView?id=cc.b2c_dns_mapping_for_ecdn_zones.htm&release=264.0.0&type=5 "To route a hostname's traffic through its embedded CDN (eCDN) zone, map DNS from your provider to the zone and validate the zone's SSL certificate. Understand the mapping rules, validation methods, and certificate limits before you add or update a certificate.").

To upload a self-managed certificate with the CDN Zones API instead, see [eCDN Custom Certificates](https://developer.salesforce.com/docs/commerce/commerce-api/guide/cdn-zones-custom-certs.html) in the developer documentation.

Restriction You can add up to 5 self-managed certificates per realm.

1. In Business Manager, click App Launcher ![App Launcher](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/cc/b2c_merchandiser_administrator/images/appLauncher.png), and then select **Administration** | **Sites** | **Embedded CDN Settings**.
2. Click **Certificates** or **Settings** for the zone to which you're adding a certificate.
3. On the Crypto tab, select the zone from the list.
4. Click **Add Certificate**.
5. Select **Self-Managed Certificate**.
    
    ![Upload Custom Certificate dialog with Self-Managed Certificate selected, showing certificate and private key fields and assignment details](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/cc/b2c_merchandiser_administrator/images/b2c_ecdn_self_managed_cert.png)
6. Enter the SSL certificate and private key information from your certificate provider.
7. Select the hostname to which you want to assign the SSL certificate.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/images/icon_note.png)
    
    Note Self-managed wildcard certificates require SANs for both the root domain and the wildcard hostname. See [Configure Wildcard Custom Hostnames](https://help.salesforce.com/s/articleView?id=cc.b2c_add_wildcard_custom_hostname.htm&release=264.0.0&type=5 "Use a single wildcard custom hostname (for example, *.merchantsite.com) to cover multiple subdomains and reduce onboarding and management overhead in B2C Commerce eCDN via Business Manager.").
8. Click **Upload Certificate**.
9. Copy the displayed verification text into your own DNS portal.
10. To check the status of hostname validation, click **Verify HostName**.
    
    Verification can take up to six hours.
11. Map DNS so that the hostname's traffic routes to its zone.
    
    See [Map DNS to an eCDN Zone](https://help.salesforce.com/s/articleView?id=cc.b2c_map_dns_to_ecdn_zone.htm&release=264.0.0&type=5 "After a hostname is active, map DNS at your provider so that the hostname's traffic routes to its embedded CDN (eCDN) zone. Use this procedure whenever you add or update a certificate for a zone.").