diff --git a/pkg/core/certmgr/providers/tencentcloud-tse/tencentcloud_tse.go b/pkg/core/certmgr/providers/tencentcloud-tse/tencentcloud_tse.go
index 51f48af82..74eeebc4f 100644
--- a/pkg/core/certmgr/providers/tencentcloud-tse/tencentcloud_tse.go
+++ b/pkg/core/certmgr/providers/tencentcloud-tse/tencentcloud_tse.go
@@ -110,6 +110,10 @@ func (c *Certmgr) Replace(ctx context.Context, certIdOrName string, certPEM, pri
 }
 
 func (c *Certmgr) uploadToCloudNative(ctx context.Context, certPEM, privkeyPEM string) (*UploadResult, error) {
+	if c.config.GatewayId == "" {
+		return nil, fmt.Errorf("config `gatewayId` is required")
+	}
+
 	// 解析证书内容
 	certX509, err := xcert.ParseCertificateFromPEM(certPEM)
 	if err != nil {
diff --git a/pkg/core/purger/providers/tencentcloud-tse/tencentcloud_tse.go b/pkg/core/purger/providers/tencentcloud-tse/tencentcloud_tse.go
index 4329023d4..fe10488de 100644
--- a/pkg/core/purger/providers/tencentcloud-tse/tencentcloud_tse.go
+++ b/pkg/core/purger/providers/tencentcloud-tse/tencentcloud_tse.go
@@ -85,6 +85,10 @@ func (p *Purger) Purge(ctx context.Context, expiry time.Duration) (*PurgeResult,
 }
 
 func (p *Purger) uploadToCloudNative(ctx context.Context, expiry time.Duration) (*PurgeResult, error) {
+	if p.config.GatewayId == "" {
+		return nil, fmt.Errorf("config `gatewayId` is required")
+	}
+
 	purgingCertIds := make([]string, 0)
 
 	// 查询云原生网关证书列表，避免重复上传