How do I associate an ACM SSL/TLS certificate with an Application, Network, or Classic Load Balancer?

Short description

ACM is integrated with Elastic Load Balancing. Use ACM to request a public certificate or import a certificate into ACM. After you create or import your certificate, you can associate the certificate with your Application, Network, or Classic Load Balancer. If you request a public certificate from ACM, then you can't export private keys for ACM issued public certificates. You can't directly install Amazon issued certificates on Amazon Elastic Compute Cloud (EC2) instances. Instead, use the certificate with a load balancer, and then register the EC2 instance behind the load balancer.

Resolution

Note: ACM certificates must be requested or imported in the same AWS Region as your Load Balancer.

Associate an ACM SSL certificate with an Application Load Balancer

To associate an ACM SSL certificate with an Application Load Balancer, add an HTTPS listener to your load balancer. For more information, see Add an HTTPS listener.

Note: Application Load Balancers use Server Name Identification (SNI) to support multiple SSL/TLS certificates.

Associate an ACM SSL certificate with a Network Load Balancer

To associate an ACM SSL certificate with an Application Load Balancer, add an HTTPS listener to your load balancer. For more information, see Add a listener.

Note: Network Load Balancers use Server Name Identification (SNI) to support multiple SSL/TLS certificates. 

Associate an ACM SSL certificate with a Classic Load Balancer

To associate an ACM SSL certificate with a Classic Load Balancer, add an HTTPS listener to your load balancer. For more information, see Configure an HTTPS listener for your Classic Load Balancer.

Related information

Create an HTTP listener for your Application Load Balancer

New - TLS termination for Network Load Balancers

Why can't I find my imported ACM certificate for my load balancer or CloudFront distribution?