Manage Self-signed Certificates

Administrators can use the Certificates page to upload and manage the self-signed certificates used by the instance to enable inbound and outbound SSL communications to a service’s REST APIs

When creating connections to REST services that use self-signed certificates, you might need to add an API’s certificate to your Visual Builder instance to validate SSL connections to that service. You can use the Certificates page to upload and remove certificate files (.pem)  for services. Uploading a service’s certificate file to the keystore will allow all applications in the instance to communicate with that service. The Certificates page displays a list of certificates that have been added. You can click the Delete button in a row to remove the certificate.

Note:

Your staged or published apps might stop working if they use service connections with self-signed certificates and the certificates have expired. Any certificates issued after 2020-09-01T00:00:00.00Z will automatically expire 398 days after they have been issued. If your apps use certificates issued before 2020-09-01T00:00:00.00Z, the certificates will not expire, but you should update them with a newer certificate.

To avoid disruptions, you should plan regular updates to refresh the self-signed certificates before they expire (for example, every 6 months). It's not recommended to use self-signed certificates in production apps.

To upload a self-signed certificate:

1. In the upper-left corner of the Visual Builder title bar, click Navigation Menu .
2. Click Certificates in the navigation menu to open the Certificates page.
   
   

   
   Description of the illustration admin-menu-certificates.png

   
   

   The Certificates page displays a list of the certificates already uploaded to the instance.

   
   
   Description of the illustration admin-certificates-page.png
   
3. Click Upload to open the Upload Certificate dialog box.

   You use the Upload Certificate dialog box to create an alias for the certificate and upload the service’s certificate file from your local system.

   
   
   Description of the illustration admin-certificates-upload.png
   
4. Type the alias in the Certificate Alias Name field.

   The alias is used to identify the certificate in the table in the Certificates page. The Certificate Type dropdown list is read-only because only Trust Certificates are supported.

5. Drag the certificate file from your local system into the upload target area, or click the upload target area to browse your local system.
6. Click Upload to add the certificate to the service keystore.