Preparing for a certificate-based SSL connection

You can set up a certificate-based SSL connection for PostgreSQL with your certificates and keys from the PostgreSQL provider.

About this task

Both traditional and containerized Content Platform Engine deployments support certificate-based SSL connection with PostgreSQL database server.

To configure certificate-based SSL for PostgreSQL:

On your PostgreSQL provider, enable SSL connection.
On your PostgreSQL provider, generate a server Certificate Authority (CA) certificate.
On your PostgreSQL provider, generate the client certificate and client private key.
Download the server certificate, client certificate, and client private key:
```
root-ca.pem
client-cert.pem
client-key.pem
```
In the Content Platform Engine client machine, install the certificate files that you downloaded in step 4 in a folder of your choice.

Based on your deployment type, choose one of the following tasks:

To configure certificate-based SSL connection for containerized deployments, see the topic Managing secrets to protect sensitive PostgreSQL SSL configuration data.
For traditional deployments, you can now configure the Content Platform Engine GCD and object store data sources to use SSL connection with the PostgreSQL database:
- To configure the GCD data source to use SSL communication with the PostgreSQL database, see the topic Configuring the global configuration database JDBC data source settings.
- To configure the object store data source to use SSL communication with the PostgreSQL database, see the topic Configuring the initial object store data sources by using the graphical user interface.