Add an Identity Source SSL Certificate

A secure sockets layer (SSL) certificate establishes secure communication between the deployment and the identity sources. You must add the identity source SSL certificate to the deployment as a trusted certificate.

Use the following procedure to add the identity source SSL certificate as a trusted certificate.

Before you begin

You must be a Super Admin.


  1. Import the SSL server certificate or the CA root certificate to the primary appliance. The certificate must be in Distinguished Encoding Rules (.der) encoded format. Make sure you have access to these certificates.

  2. Log on to the Operations Console on the primary instance.

  3. Click Deployment Configuration > Identity Sources > Identity Source Certificates > Add New.

  4. If prompted, enter your Super Admin User ID and password.

  5. Enter a name for the new identity source certificate.

  6. Browse to the directory where the SSL certificate is located. Certificates typically have .cer, .pem, or .der file extensions.

  7. Click Save.