SA Core components certificates

In third-party certificate mode, SA generates a CSR for each certificate required to:

  • install SA Core
  • install an SA Satellite
  • recertify an SA Core

Submit these CSRs to your CA for signing, and place the issued certificates on the Core/Satellite machines. Make sure to also provide the CA certificate chain that signs the certificates. For more details, see SA certificates format.

Once SA can pick up the external certificates, the Core installation or Core Recertification job resumes automatically.

Renew the SA Core/Satellite certificates

You can renew the certificates of an SA Core or Satellite by running a Core Recertification job. If the SA Core/Satellite is part of a Multimaster Mesh, make sure to recertify the entire Mesh.