---
title: "Certificate Management"
slug: "certificate-management"
tags: ["administration"]
updated: 2026-09-11T19:11:40Z
published: 2026-09-11T19:11:40Z
canonical: "docs.unqork.io/certificate-management"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unqork.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Certificate Management

To access Certificate Management, navigate to **Administration** > **Integration** > **Certificate Management**.

The Certificate Management page is where administrators upload and manage PFX certificates for the environment. Certificates serve two purposes in Unqork:

- **SAML**: Used for signing SAML authentication requests and decrypting encrypted assertions. See [Single Sign-On (SSO) Management](/unqorkai/docs/single-sign-on-sso-management).
- **Services**: Used for Mutual TLS authentication on outbound service connections. See [Services Administration](/unqorkai/docs/services-administration).

For background on certificates and related concepts, see [Certificate Concepts](/unqorkai/docs/certificate-concepts).

> [!WARNING]
> Managing certificates requires administrative permissions. Administrators needing access should contact their environment administrator.

![[docs-mockup:DocsAdminListCanvas] Administration panel overview](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260911_185047_20d8fe3b5ecf4e41ba9941bf1205be78.png?sv=2026-02-06&spr=https&st=2026-11-05T04%3A42%3A21Z&se=2026-11-05T05%3A42%3A21Z&sr=c&sp=r&sig=HELTwe6kaRsdxwweTwItrtrFzvvPBZKZeIstB5NAdHg%3D)

## Certificate List

The certificate list displays all certificates configured in the environment.

| Column | Description |
| --- | --- |
| **Name** | The unique name of the certificate. |
| **Number of Services** | The number of services associated with this certificate. |
| **Issue Date** | The date the certificate became valid, extracted from the certificate. |
| **Expiration Date** | The date the certificate expires, extracted from the certificate. |
| **Type** | The certificate type: **SAML** or **Services**. |
| **Status** | The current validity status of the certificate: **Active**, **Expires Soon**, or **Expired**. |
| **Actions** | Certificate-level actions. See [Certificate Actions](/unqorkai/docs/certificate-management#certificate-actions) below. |

### Page Actions

| Action | Description |
| --- | --- |
| **New Certificate** | Opens a modal to upload a new certificate. |

### Certificate Actions

Click **Manage** on any row to access the following:

| Action | Description |
| --- | --- |
| **Edit** | Opens a modal to update the certificate or its associated services. |
| **Delete** | Permanently removes the certificate. Not available if the certificate is in use by a SAML SSO configuration. |

## Adding a Certificate

Click **New Certificate** to open a modal with the following sections: **Certificate Info** and **Attach Services**. Click **Save** to create the certificate, or **Cancel** to discard.

### Certificate Info

| Field | Description |
| --- | --- |
| **Certificate Title** | A unique name for the certificate. Must contain only letters, numbers, and hyphens. |
| **PFX or PKCS12 encoded (hex) private key and certificate chain** | The certificate content. Unqork extracts the Subject Name, Issuer Name, Serial Number, Certificate Authority, Issue Date, and Expiration Date automatically from the uploaded certificate. |
| **PFX Passphrase** | An optional passphrase for the certificate, if one was set when the certificate was exported. |
| **Certificate Type** | The purpose of the certificate. Options include: **SAML** or **Services**. |

### Attach Services

| Field | Description |
| --- | --- |
| **Services** | A drop-down of services to associate with this certificate for Mutual TLS. Only services configured in [Services Administration](/unqorkai/docs/services-administration) with a compatible authentication type display here. Displays for **Services** certificates only. Select one or more services, then click **Add Services** to add them. |

Added services display in a table with the following columns:

| Column | Description |
| --- | --- |
| **Service Name** | The name of the associated service. |
| **Type of Authentication** | The authentication type configured for the service. |

Select the delete icon on any row to remove the service from the certificate.

## Editing a Certificate

Click **Edit** on any row to open the same modal used when creating a certificate. The **Certificate Info** and **Attach Services** sections are pre-populated with the existing values. Update any fields and click **Save** to apply changes, or **Cancel** to discard.

---

**Changelog**

| Date | Change |
| --- | --- |
| — | Initial publication. |

Security Assertion Markup Language (SAML) is a protocol that allows an identity provider (IdP) to send a user's credentials to a service provider (SP) to verify their identity and grant them access to a service.

Transport Layer Security (TLS) is a protocol that provides communication security across a network.

The Number data type accepts integer or floating point values. The number data type does not use quotes around numerical values.

Single Sign-On is an authentication scheme that enables users to use one set of login credentials across multiple services.

A key-value pair is a fundamental data structure where a unique "key" is associated with a specific "value," used for organizing and retrieving data efficiently, like in dictionaries or databases.