Configure an Engine to Use Custom Certificates

Configure custom engine certificates in Cortex XSOAR 6.13.

For communication tasks that go through an engine, you can replace the default self-signed certificate for the engine with your own certificate.

1. Find the two files created by the engine. The default location is /usr/local/demisto.

   d1.key.pem

   d1.cert.pem
2. Replace the contents of these files with your own certificates.
3. Change file owner to demisto:

   chown -R demisto:demisto d1.key.pem

   chown -R demisto:demisto d1.cert.pem
4. Set the file permissions:

   chmod 600 d1.key.pem

   chmod 644 d1.cert.pem
5. (Optional) If you are using a key passphrase for your custom certificate, add the passphrase to your engine configuration:

   1. Go to Settings → Engines.
   2. Create New Engine and provide an engine name or select an existing engine and Edit Configuration.
   3. Select Use a passphrase for the engine certificate private key.
   4. Click Save.