The Certificate Management page is where administrators upload and manage PFX certificates for the environment. Certificates serve two purposes in Unqork:
- SAML: Used for signing SAML authentication requests and decrypting encrypted assertions. See Single Sign-On (SSO) Management.
- Services: Used for Mutual TLS authentication on outbound service connections. See Services Administration.
For background on certificates and related concepts, see Certificate Concepts.
Important: Managing certificates requires administrative permissions. Administrators needing access should contact their environment administrator.
Certificate List
The certificate list displays all certificates configured in the environment.
| Column | Description |
|---|---|
| Name | The unique name of the certificate. |
| Number of Services | The number of services associated with this certificate. |
| Issue Date | The date the certificate became valid, extracted from the certificate. |
| Expiration Date | The date the certificate expires, extracted from the certificate. |
| Type | The certificate type: SAML or Services. |
| Status | The current validity status of the certificate: Active, Expires Soon, or Expired. |
| Actions | Certificate-level actions. See Certificate Actions below. |
Page Actions
| Action | Description |
|---|---|
| New Certificate | Opens a modal to upload a new certificate. |
Certificate Actions
Click Manage on any row to access the following:
| Action | Description |
|---|---|
| Edit | Opens a modal to update the certificate or its associated services. |
| Delete | Permanently removes the certificate. Not available if the certificate is in use by a SAML SSO configuration. |
Adding a Certificate
Click New Certificate to open a modal with the following sections: Certificate Info and Attach Services. Click Save to create the certificate, or Cancel to discard.
Certificate Info
| Field | Description |
|---|---|
| Certificate Title | A unique name for the certificate. Must contain only letters, numbers, and hyphens. |
| PFX or PKCS12 encoded (hex) private key and certificate chain | The certificate content. Unqork extracts the Subject Name, Issuer Name, Serial Number, Certificate Authority, Issue Date, and Expiration Date automatically from the uploaded certificate. |
| PFX Passphrase | An optional passphrase for the certificate, if one was set when the certificate was exported. |
| Certificate Type | The purpose of the certificate. Options include: SAML or Services. |
Attach Services
| Field | Description |
|---|---|
| Services | A drop-down of services to associate with this certificate for Mutual TLS. Only services configured in Services Administration with a compatible authentication type display here. Displays for Services certificates only. Select one or more services, then click Add Services to add them. |
Added services display in a table with the following columns:
| Column | Description |
|---|---|
| Service Name | The name of the associated service. |
| Type of Authentication | The authentication type configured for the service. |
Select the delete icon on any row to remove the service from the certificate.
Editing a Certificate
Click Edit on any row to open the same modal used when creating a certificate. The Certificate Info and Attach Services sections are pre-populated with the existing values. Update any fields and click Save to apply changes, or Cancel to discard.
Changelog
| Date | Change |
|---|---|
| — | Initial publication. |