Manage Certificates¶
Choreo provides centralized certificate management at the organization level, allowing you to manage TLS certificates and apply them to components during deployment. This ensures secure communication between your components and external services by maintaining trusted certificates in a single place.
Create a certificate¶
Important
- To create certificates, you need
Create Global ConfigsorManage Global Configspermission.
To create a new certificate, follow the steps given below:
- In the Choreo Console, go to the top navigation menu. Click Organization and select your organization.
- In the left navigation menu, click DevOps and then click Certificates.
- On the Certificates Management page, click + Create Certificate.
-
On the Add a Certificate page, choose why you're adding the certificate:
- Verify External Server: Use a public certificate to confirm another server's identity for secure TLS connections.
- Secure Website Domain (Coming Soon): Use SSL/TLS to safely secure your custom domains managed through Choreo.
-
Specify the following details:
- Certificate Name: A name for the certificate.
- Description: A description for the certificate (optional).
- Certificate File: Upload the certificate file in
.pemformat.
-
Click Add.
View certificates¶
Important
- To view certificates, you need
View Global Configspermission.
To view the certificates in your organization, follow the steps given below:
- In the Choreo Console, go to the top navigation menu. Click Organization and select your organization.
- In the left navigation menu, click DevOps and then click Certificates.
-
The Certificates Management page lists all certificates in the organization with the following details:
- Identifier: The name of the certificate.
- Type: The certificate type (for example, Public Cert).
- Validity: The remaining validity period (for example, Expires in 277 days).
- Action: Options to manage the certificate, including delete.
-
Click a certificate to view its Metadata tab, which includes details such as expiry date, issuer, subject, and fingerprints.
View certificate usage¶
A certificate can be used by multiple components across different projects within your organization. The Usage tab provides visibility into all components and the relevant environments that reference the selected certificate.
To view certificate usage:
- Select a certificate from the list.
- Click the Usage tab.
- The tab displays all components using the certificate and the environments they are used in.
Delete a certificate¶
Important
- To delete certificates, you need
Delete Global ConfigsorManage Global Configspermission.
To delete a certificate, follow the steps given below:
Warning
Deleting a certificate is a permanent action. Ensure that the certificate is not in use by any component before deleting it.
- In the Choreo Console, go to the top navigation menu. Click Organization and select your organization.
- In the left navigation menu, click DevOps and then click Certificates.
- In the Certificates list, click the delete icon next to the certificate you want to delete. This will display a confirmation dialog with details about the impact of the deletion.
- Review the details and confirm the deletion.