Baidu Smart Cloud TrustAsia Free SSL Certificate One-Year Application Guide

With the continuous improvement of network security awareness, SSL certificates have become a standard for website operations. The TrustAsia free SSL certificate service launched by Baidu Smart Cloud provides a cost-effective security solution for webmasters. This article will introduce the application process, usage tips and precautions of this service in detail to help you easily obtain and deploy SSL certificates.

Baidu Smart Cloud SSL Certificate Service Overview

The free SSL certificate service launched by Baidu Smart Cloud in cooperation with TrustAsia is one of the few options on the market that still provides a one-year free certificate. The service has the following features:

• Certificate type : DV (Domain Validation) single domain certificate
• Validity period : 1 year (will be adjusted to 3 months after August 1, 2024)
• Encryption algorithm : RSA
• Quota limit : 20 free certificates per user (including renewals)
• Renewal policy : Supports manual renewal, does not support automatic renewal

Preparation before applying

Before you start your application, please make sure you have completed the following preparations:

1. Register a Baidu Smart Cloud account and complete real-name authentication
2. Prepare the domain name for which you need to apply for a certificate
3. Have DNS management rights for the domain name
4. Understand basic SSL certificate knowledge

Detailed application steps

Step 1: Log in to the console

Visit Baidu Smart Cloud SSL certificate application page: https://console.bce.baidu.com/cas/#/cas/apply/create

You can choose to log in in the following ways:

• Login with mobile number + verification code
• Baidu account login
• Baidu APP scan code to log in

Step 2: Select the certificate type

On the certificate application page, you need to:

1. Select "TrustAsia" in "Other Certificate Brands"
2. Select "Domain Type DV" for the certificate type
3. Select "Single Domain Version"
4. Click the "Proceed to Checkout" button

Step 3: Confirm the order

The system may display a recommendation for a paid certificate. Please:

• Ignore the paid option
• Click "Continue to apply for a free certificate"
• Check the order amount (should be 0 yuan)
• Click "Submit Order"

Step 4: Fill in the certificate information

After the order is submitted successfully, enter the certificate application form:

1. In the "Domain Name" field, enter the full domain name you want to protect (e.g. www.example.com)
2. It is recommended to select "DNS verification" for verification method
3. Keep other options as default
4. Click the "Submit" button at the bottom of the page

Step 5: Complete domain name verification

This is the most critical step and requires you to:

1. Log in to the domain name DNS management console
2. Add a TXT record
3. The host record is filled with the value provided by the system (such as _acme-challenge)
4. Fill in the string provided by the system as the record value
5. Save DNS settings
6. Return to Baidu Smart Cloud Console and click the "Refresh" button

Step 6: Wait for the certificate to be issued

After verification, the certificate status will change to "Awaiting CA Verification". Usually, the issuance will be completed within 5-10 minutes, and you will receive a text message and email notification.

Certificate download and deployment

After the certificate is successfully issued, you can:

1. Return to the certificate list page
2. Click "View Certificate"
3. Select the certificate format that suits your server (Apache/Nginx/IIS, etc.)
4. Set a 4-digit decompression password
5. Download the certificate file package

FAQ

Q: Do free certificates support wildcard domain names?

A: No, the free certificate is only applicable to a single domain name.

Q: How to renew the certificate after it expires?

A: The renewal portal will be open 30 days before the certificate expires, and you need to renew manually.

Q: Why does the DNS verification still show verification failure after verification?

A: It may take time for the DNS record to take effect. Please wait for 10-15 minutes and try again.

Best Practices

• It is recommended to start paying attention to renewal matters 45 days before the certificate expires.
• For important businesses, you may consider purchasing a paid certificate for more comprehensive protection.
• Check the status of your certificates regularly to ensure they have not expired unexpectedly
• Establish a certificate management ledger to record the expiration date of each certificate

Through the above steps, you should be able to successfully complete the application and deployment of Baidu Smart Cloud TrustAsia free SSL certificate. As the policy adjustment on August 1 is approaching, it is recommended that users in need apply as soon as possible to enjoy the 1-year validity period.