HTTPS with a Signed Certificate

Configure HTTPS for Cortex XSOAR 6.14 with a signed X.509 certificate and supported TLS versions.

By default, the server uses a self-signed certificate for a secure HTTP connection. TLS versions 1.2 and 1.3 are supported.

Caution

When using a Safari browser, the self-signed certificate must be added to the OS Keychain.

If you want to use your own server certificate (X.509 certificates), we recommend replacing `/usr/local/demisto/cert.key` with the private key and `/usr/local/demisto/cert.pem` with the certificate. To create your own certificate and key, see Install or Renew a Custom Certificate.