Manage custom certificates - Manage the list of certificates that Cortex XSOAR trusts for outbound integrations or custom CA roots. - Administrator Guide - 8.13 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation
Product
Cortex XSOAR
Version
8.13
Creation date
2026-02-12
Last date published
2026-05-27
Category
Administrator Guide
Solution
On-prem
Abstract

Manage the list of certificates that Cortex XSOAR trusts for outbound integrations or custom CA roots.

For backup and restore, you can manage the list of certificates Cortex XSOAR trusts for outbound integrations and custom CA roots. This saves time by automatically syncing certificates across the entire cluster, eliminating the need for manual, per-node updates.

To manage the list of trusted certificates, run the manage_certificates command via SSH with the following subcommands:

Subcommand

DescriptionEs

Example

apply

Adds trusted CAs from a file path. If run without flags, the command reconciles the existing bundle across the cluster.

Add a trusted CA:

manage_certificates apply -cert /tmp/customer-root-ca.crt

get

Lists all currently trusted certificates or displays details for a specific certificate.

List trusted certificates:

manage_certificates get

remove

Removes certificates from the trust store by their Common Name (CN).

Remove a certificate:

manage_certificates remove -cert customer-root-ca