SSL Configuration

Add SSL Certificates to Your Domain

Certificates, TLS, HTTPS play a vital role in zero-trust networks. And how about your website? You can have a security check. Since we aim to provide a scalable way to enable a Zero Trust architecture, the Datawiza Access Proxy (DAP) supports SSL. All you need to do is configuring the Datawiza Cloud Management Console (DCMC):

DCMC SSL Configuration

Enable SSL

Select Advanced tab in your application page, choose SSL tab, and then click Edit button. Open SSL and select Cert Type. We provide two options: one is using datawiza self-signed certificate, which can be used for testing purposes, or the other one is uploading your own certificate. There are two ways to upload your own certificate. You can choose to upload your own certificate from a file or paste from the content: Click Save.

Note

When you enable to use SSL usually you should update your application url accordingly. Go to General tab of your application detail, change protocol from http to https in Application URL. When you updated the application url, please remember to update the Redirect URI of the IdP as well.

Switch from Datawiza Self-sign certificate to your own certificate

When you initially create an application from scratch, it defaults to using Datawiza's self-signed certificate. If you want to switch to using your own certificate: Select Advanced tab in your application page, choose SSL tab, and then click Edit button.

Then click the Update Certificate button and choose your preferred way to switch to using your own certificate.

Update your certificate

Sometimes your certificate got expired and you need to update it: you can select Advanced tab in your application page, choose SSL tab, and then click Edit button.

Then click the Update Certificate button and choose your preferred way to update your certificate.

Try it Out

Let's visit https://localhost:9772 and login. There will be a page to show Your connection is not private. It is because we are using a self-signed cert created by mkcert for testing purposes: We can now see our certificate working in action.: