> For the complete documentation index, see [llms.txt](https://docs.bdb.ai/administrative-settings-5/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bdb.ai/administrative-settings-5/admin-panel-options/configurations/ssl-certificate-settings.md).

# SSL Certificate Settings

By default, Platform connectors will not perform any verification of the server certificate. It means that someone can pretend to be the server without the client’s awareness. To prevent this kind of impersonation, the client needs to be able to verify the server's identity through a trusted chain of verification.

{% hint style="warning" %}
*<mark style="color:orange;">**Pre-requisites:**</mark> For SSL support to work, the user must have the following:*

1. *A MySQL/ ClickHouse /PostgreSQL server that supports SSL (as currently the SSL implementation has been provided for these  data connectors).*
2. *A signed client certificate.*
   {% endhint %}

## Upload a New Certificate

* Click the ***Upload Certificate Settings*** option from the list of ***Configurations***.&#x20;

  <figure><img src="https://4090376733-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuMgCAr8LDezd8gVX68JP%2Fuploads%2Fg5oBTDUL1iXGJC0lqLCg%2Fimage.png?alt=media&amp;token=2c6aa74f-39f2-41fa-b970-eded8fae81c2" alt=""><figcaption><p><em><strong>Accessing the Upload Certificate Settings option</strong></em></p></figcaption></figure>
* The ***Upload Certificate Settings*** page opens (It will be an empty list initially).&#x20;
* Click the ***New*** option to upload settings for a new certificate.&#x20;

<figure><img src="https://4090376733-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuMgCAr8LDezd8gVX68JP%2Fuploads%2FVfiryD1J6qg6CuoTgZMx%2Fimage.png?alt=media&amp;token=1c48cb35-9f8d-4dba-a83d-2de48d8c5463" alt=""><figcaption></figcaption></figure>

* Provide the required details of the SSL Connector.
  * ***Name***- This name is a key that can be configured for the Respective SSL Connector from the platform.
  * ***CA Certificate***-Upload a certificate issued by a trusted Certificate Authority that validates the identity of the SSL Connector.&#x20;
  * ***Client Certificate***- A Client Certificate is a digital certificate that authenticates the client's identity to the server. It ensures secure and sensitive communications by encrypting data transmitted between the client and the server.
  * ***Key File Upload***-  A small data files that digitally bind a key.
  * ***Jks File Upload***- It contains the Application Server's trusted certificates.
  * ***Jks Trust Store Upload*** - It contains the Application Server's trusted certificates.
  * ***Jks File Password***- Password used to protect a JKS file.
  * ***Jks Trust Store Password*** – To protect a JKS file that contains trusted certificates.
* &#x20;After Uploading the required certificates and details click the ***Save*** option to save the details.

<figure><img src="https://4090376733-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuMgCAr8LDezd8gVX68JP%2Fuploads%2FTO7Zo33sBS0AwhvZpukB%2Fimage.png?alt=media&amp;token=0f9b3995-b92d-4d7c-9940-b30405202eba" alt=""><figcaption><p><em><strong>Saving a new Certificate configuration</strong></em></p></figcaption></figure>

* A notification message appears.
* The uploaded certificate gets listed on the Certificate List page.

<figure><img src="https://4090376733-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuMgCAr8LDezd8gVX68JP%2Fuploads%2Fl3n6c0dL67ayG0CCQX7V%2Fimage.png?alt=media&amp;token=30e1c626-255d-4bf5-a38f-a0c0bc9dffe6" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
*<mark style="color:green;">Please Note:</mark>*&#x20;

* *In-between space is not allowed in the **Name**.*&#x20;
* *Use the **Back** option to exit the page.*&#x20;
  {% endhint %}

## View the Uploaded Certificate

* Navigate to the ***Upload Certificate Settings*** page.
* Click the ***View*** icon for an uploaded certificate entry.    &#x20;

<figure><img src="https://content.gitbook.com/content/uMgCAr8LDezd8gVX68JP/blobs/BAmNZGMEzNvJqXMSAaqT/image.png" alt=""><figcaption></figcaption></figure>

* The details of the selected certificate entry are displayed.

<figure><img src="https://content.gitbook.com/content/uMgCAr8LDezd8gVX68JP/blobs/eydprefY1XZ4oVijOhp3/image.png" alt=""><figcaption><p>Displaying the details for an Uploaded Certificate</p></figcaption></figure>

## Delete the Uploaded Certificate

* Navigate to the ***Upload Certificate Settings*** page.
* Click the ***Delete*** icon for an uploaded entry. &#x20;
* The ***Delete Certificate*** confirmation dialog box appears.
* Confirm the deletion by clicking the ***Yes*** option.   &#x20;

<figure><img src="https://4090376733-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuMgCAr8LDezd8gVX68JP%2Fuploads%2FLJtqIhHP3Yt6EfL7a8Fa%2Fimage.png?alt=media&amp;token=affea7f1-6bf7-4ff3-b959-8146c83a088e" alt=""><figcaption></figcaption></figure>

* A notification message appears to confirm the deletion of the SSL configuration, and the selected SSL configuration gets deleted.     &#x20;

<figure><img src="https://4090376733-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuMgCAr8LDezd8gVX68JP%2Fuploads%2FpM7OxxiFnCcr4cdh7Mz0%2Fimage.png?alt=media&amp;token=5fbe2a92-89de-4a49-bcc9-a3bbdb42a63c" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
*<mark style="color:green;">Please Note:</mark>  The Admin can choose the **Cancel** option to cancel the deletion.*&#x20;

{% endhint %}
