Certificates

Purpose

The Certificates page in the Admin Console enables you manage the following types of SSL certificates in the Admin Console: client certificates and trusted server certificates.

Access

To access the Certificates page, go to the Admin Console. Then, in the left navigation menu, under Integration, click Certificates.

Settings

There are two types of SSL certificates that can be managed in the Admin Console: Client Certificates and Trusted Server Certificates.

Client certificates

Some web services require transport-level client certificate authentication when setting up an SSL connection. The Client Certificates tab of the Certificates page allows administrators to upload certificates which can be applied to various Appian services and integrations, including:

• HTTP integrations
• HTTP connected systems
• Apache Kafka connected systems
• Call Web Service smart service
• webservicequery() and webservicewrite() expression functions

The main view of the Client Certificates page is a grid view of all the client certificates in the system. Initially the grid will be empty until certificates are uploaded.

All actions performed on the Client Certificates page are captured in the Admin Console audit log for auditing purposes. Each modification generates an audit log entry that includes the username of the user who made the change, along with the previous and new values.

Considerations and limitations

• To guard against spoofing attacks, avoid using wildcard certificates. Instead, use SSL certificates that include the domain name or server endpoint as the Common Name (CN) to ensure stricter server identity verification and enhanced security.
• Keep a copy of the certificate stored outside of Appian. Certificates cannot be downloaded from the Client Certificates page once uploaded.
• Client certificates cannot be imported or exported from the Admin Console.

Uploading a new certificate

You can upload a file that consists of a single or multiple certificates.

To upload a file:

1. In the INTEGRATION section of the Admin Console, click Certificates. The Client Certificates tab is active by default.
2. Click New Client Certificate.
3. Select a file. The file must be formatted in PEM (.pem) format.
4. Click UPLOAD.

The password will not be stored. The uploaded certificates will be stored in an encrypted format in the Appian data source.

Deleting a certificate

Deleting a certificate will permanently remove it from all integrations.

To delete a certificate:

1. In the INTEGRATION section of the Admin Console, click Certificates. The Client Certificates tab is active by default.
2. In the grid, click next to the certificate.

Trusted server certificates

The Trusted Server Certificates tab of the Certificates page allows administrators to upload various types of server certificates, such as self-signed or private certificate authority (CA) signed certificates. These certificates are trusted and can be applied to various Appian services and integrations, including:

• HTTP integrations
• Connected systems
• Plug-ins
• Call Web Service smart service
• webservicequery() and webservicewrite() expression functions
• Secure connections to LDAP over LDAPS
• OpenID Connect requests (except when an HTTP proxy is configured)
• Deployment REST API
• Connected System Management REST API

The main view of the Trusted Server Certificates page presents a grid that lists all trusted certificates added to the system. When first accessing this page, the grid will be empty until certificates are uploaded.

All actions performed on the Trusted Server Certificates page are captured in the Admin Console audit log for auditing purposes. Each modification generates an audit log entry that includes the username of the user who made the change, along with the previous and new values.

Considerations and limitations

• To guard against spoofing attacks, avoid using wildcard certificates. Instead, use SSL certificates that include the domain name or server endpoint as the Common Name (CN) to ensure stricter server identity verification and enhanced security.
• Keep a copy of the certificate stored outside of Appian. Certificates cannot be downloaded from the Trusted Server Certificates page once uploaded.
• Trusted server certificates cannot be imported or exported from the Admin Console.

Uploading a new certificate

You can upload a file that consists of a single or multiple certificates.

To upload a file:

1. In the INTEGRATION section of the Admin Console, click Certificates. The Client Certificates tab is active by default.
2. Go to the Trusted Certificates tab.
3. Click New Trusted Server Certificate.
4. Select a file. The file must be formatted in PEM (.pem) format.
5. Click UPLOAD.

The uploaded certificates will be stored in an encrypted format in the Appian data source.

Deleting a certificate

Deleting a certificate will permanently remove it from all integrations.

To delete a certificate:

1. In the INTEGRATION section of the Admin Console, click Certificates. The Client Certificates tab is active by default.
2. Go to the Trusted Certificates tab.
3. In the grid, click next to the certificate.

Feedback