Configure an Engine to Use Custom Certificates

Configure custom certificates for an engine in Cortex XSOAR 6.12.

For communication tasks that go through an engine, you can replace the default self-signed certificate for the engine with your own certificate.

1. Find the two files created by the engine. The default location is /usr/local/demisto.

   d1.key.pem

   d1.cert.pem

2. Replace the contents of these files with your own certificates.

3. Change file owner to demisto:

   chown -R demisto:demisto d1.key.pem

   chown -R demisto:demisto d1.cert.pem

4. Set the file permissions:

   chmod 600 d1.key.pem

   chmod 644 d1.cert.pem

5. (Optional) If you are using a key passphrase for your custom certificate, add the passphrase to your engine configuration:

   1. Go to Settings → Engines.

   2. Create New Engine and provide an engine name or select an existing engine and Edit Configuration.

   3. Select Use a passphrase for the engine certificate private key.

   4. Click Save.