Deploy a global Google-managed certificate with load balancer authorization

This tutorial shows you how to use Certificate Manager to deploy a global Google-managed certificate with load balancer authorization.

Load balancer authorization lets you obtain a Google-managed certificate for your domain when traffic is served by the load balancer. This method doesn't require any additional DNS records for certificate provisioning.

The following load balancers support Google-managed certificates with load balancer authorization:

  • Global external Application Load Balancer
  • Classic Application Load Balancer
  • Global external proxy Network Load Balancer
  • Classic proxy Network Load Balancer

Objectives

This tutorial shows you how to complete the following tasks:

  • Create a Google-managed certificate issued by a publicly trusted Certificate Authority (CA) with load balancer authorization by using Certificate Manager.
  • Deploy the certificate to a supported load balancer by using a target HTTPS proxy.

If you're deploying a certificate to a production domain, traffic is interrupted briefly while the certificate is set up and activated on your load balancer.