Add a Custom Root Certificate

Custom root certificates can be used to verify the authenticity of a server that hosts connector framework web service connections. These custom root certificates will be recognized when outbound https calls are made by an Intelligent Advisor site.

To use a custom root certificate, a Connections administrator adds a root certificates via an Intelligent Advisor Hub, and then chooses which connections allow these custom signing authorities.

Existing custom root certificates can be reviewed, and expired certificates removed.

Additionally, client-side certificates may be used to verify the authenticity of the Intelligent Advisor site. For more information, see Add a Client Certificate.

Add a custom root certificate

To add a root certificate:

  1. In Intelligent Advisor Hub, navigate to the Connections Page.
  2. Select the Custom root certificates tab.
  3. Click Create. The Add custom root certificate page opens.
  4. In the Name field, enter a name for the new certificate.
  5. In the Certificate field, paste the certificate content in the format:

    -----BEGIN CERTIFICATE-----
    <certificate content>
    -----END CERTIFICATE-----

    The Add Custom Certificate window from the Connections tab on Intelligent Advisor Hub
    Note that a custom root certificate must be in PEM (Privacy-Enhanced Mail) format before it can be pasted into the Certificate field. To convert a certificate in DER format into PEM format, see Convert a custom root certificate.
  6. Click Apply. The details from the certificate you provided are extracted and shown in the CUSTOM ROOT CERTIFICATE SETTINGS panel.

    The Custom Root Certificate Settings for a root certificate in Intelligent Advisor Hub.

Convert a custom root certificate

A custom root certificate must be in PEM format before it can be pasted into the Certificate field.

The following command uses the OpenSSL command line utility to convert a certificate in DER format into PEM format:

openssl x509 –inform der –in certificate.cer –out certificate.pem

The resulting PEM file can be copied and pasted into the Certificate field.

Delete a custom root certificate

To delete a custom root certificate:

  1. In Intelligent Advisor Hub, navigate to the Connections Page.
  2. Select the Custom root certificates tab.
  3. Click the certificate name.
  4. In the Actions menu, select Delete certificate. You will be asked to confirm that you want to delete the certificate. Click Delete. The certificate will be deleted and will no longer appear on the Custom root certificates page.