Managing certificates

Edit online

To enable secure communication from Cloud Pak for Business Automation as a Service systems to your service endpoints, you might have to add certificates to the trust stores that are used by the SaaS systems to connect to your target systems or services.

Before you begin

Ensure that you have the Operator role and its permissions to view and use the certificate management functionality.

About this task

You have two options for installing certificates:
  • Option 1: Download the leaf certificate from the endpoint of the target system.
  • Option 2: Upload certificate files from your local machine.
Use the following criteria to select one of the options:
  • Option 1: If you must install only a leaf certificate, and the target system is running and can be reached from the SaaS environment, use option 1 to download the certificate and install it.
  • Option 2: If you must install a certificate chain, and the target systems are not running or reachable yet, use option 2 to upload the certificate file if you already have it.
To use option 2, make sure the certificate file is in the PEM format, with the file extension .pem, .cer or .crt. The file should contain only one certificate. The certificates for a chain must be installed individually. The following example shows the format of a PEM file that is suitable to upload. It uses a single block of Base64 encoded certificate data.

-----BEGIN CERTIFICATE-----
[Base64 encoded certificate data]
-----END CERTIFICATE-----

Procedure

Select an option and follow its steps to install a certificate.
Option 1: Download the certificate from the target system
  1. Log in to your cloud subscription.
  2. Navigate to the system operations view of your environment.
  3. Open Certificates and click Import Certificate.
  4. Enter an alias for the new certificate. It should be unique to the environment on which you are installing the certificate.
  5. Select the From service provider URL option.
  6. Enter the URL of the target system.
  7. Click Import to start the download of the certificate from the specified target system and its installation on the SaaS system.
Option 2: Upload the certificate file from your local system
  1. Log in to your cloud subscription.
  2. Navigate to the system operations view of your environment.
  3. Open Certificates and click Import Certificate.
  4. Enter an alias for the new certificate. It should be unique to the environment on which you are installing the certificate.
  5. Select the From file option.
  6. Select the certificate file that you want to upload from your local system.
  7. Click Import to start the upload and installation of the certificate.