Manage CA set certificates
Add certificates to a CA set
To learn about adding CA certificates to a CA set, navigate to Create a new version and add certificates section.
View a certificate in a CA set
To view the details of a certificate:
- View the CA set.
- Expand the CA set version and select the CA certificate you want to view. The certificate information is displayed on the right.
- Click Show source to view the CA certificate PEM.
Remove a certificate from a CA set
Changes in a CA set and validation
Any change in a CA set triggers validation. Since Mutual TLS Edge Truststore can't validate an empty CA set, you can’t remove all the certificates from the CA set version.
To remove a certificate from a set:
Note that you can't remove certificates from a CA set version if it's active on any network, or the CA set version has in-progress deployment requests on any network.
- View the CA set whose certificates you want to remove.
- Select and expand the required CA set version.
- In the Actions menu select Edit. The CA set edition window opens.
- To remove the certificate(s), check the one(s) you want, and click Remove selected.
You can click Review version changes to verify the undertaken action.
- Click Save version to apply the changes.
Link or unlink CPS certificate slots in a CA set
To link a CPS certificate slot in a CA set:
- Select ☰ > CDN > Certificates.
- Select the certificate slot you want to link to the set.
- Under Actions, select View and Edit Deployment Settings.
- Under Mutual Authentication, click Edit.
- Select the CA set, click Update, then click Submit. Once the slot deploys, it appears in your CA set (see View a CA set).
To unlink a CPS certificate slot in a CA set:
- Select ☰ > CDN > mTLS Edge Truststore
- Under CA certificate sets, select the set.
- Click Slots. If available, the CPS certificate slots linked to the set appear.
- Under Actions, select View and Edit Deployment Settings. The Certificate Provisioning System landing page appears.
- Under Mutual Authentication, click Edit. The CA set linked to the slot appears in the Certificate Set field.
- In the Certificate Set field, click the X to unlink the CA set.
Updated 2 months ago