Add certificates to a CA set

To learn about adding CA certificates to a CA set, navigate to Create a new version and add certificates section.

View a certificate in a CA set

To view the details of a certificate:

1. View the CA set.
2. Expand the CA set version and select the CA certificate you want to view. The certificate information is displayed on the right.
3. Click Show source to view the CA certificate PEM.

Remove a certificate from a CA set

📘

Changes in a CA set and validation

Any change in a CA set triggers validation. Since Mutual TLS Edge Truststore can't validate an empty CA set, you can’t remove all the certificates from the CA set version.

To remove a certificate from a set:

Note that you can't remove certificates from a CA set version if it's active on any network, or the CA set version has in-progress deployment requests on any network.

1. View the CA set whose certificates you want to remove.
2. Select and expand the required CA set version.
3. In the Actions menu select Edit. The CA set edition window opens.
4. To remove the certificate(s), check the one(s) you want, and click Remove selected.

📘

You can click Review version changes to verify the undertaken action.

5. Click Save version to apply the changes.

Link or unlink CPS certificate slots in a CA set

To link a CPS certificate slot in a CA set:

1. Select ☰ > CDN > Certificates.
2. Select the certificate slot you want to link to the set.
3. Under Actions, select View and Edit Deployment Settings.
4. Under Mutual Authentication, click Edit.
5. Select the CA set, click Update, then click Submit. Once the slot deploys, it appears in your CA set (see View a CA set).

To unlink a CPS certificate slot in a CA set:

1. Select ☰ > CDN > mTLS Edge Truststore
2. Under CA certificate sets, select the set.
3. Click Slots. If available, the CPS certificate slots linked to the set appear.
4. Under Actions, select View and Edit Deployment Settings. The Certificate Provisioning System landing page appears.
5. Under Mutual Authentication, click Edit. The CA set linked to the slot appears in the Certificate Set field.
6. In the Certificate Set field, click the X to unlink the CA set.