Using mTLS to enhance the security of credentials

When interacting with certain APIs, you might be required to enable mutual TLS (mTLS). mTLS enhances security by encrypting communications between the client - Oomnitza instance - and the server - the external API.

For most communications, standard authentication provides sufficient protection. This level of authentication is only used on top of standard authentication and may be required by certain APIs such as Amazon Web Services (AWS) and Google Cloud. 

Prerequisites

1. Existing credentials

Ensure your credentials and credential details are populated in the INFORMATION and AUTHORIZATION tab.

2. Certificate and private key, or single .pfx file:

Certificate (formats: *.crt, *.cert, *.der, *.pem, *.p7b, *.p7c, or *.cer): Contains your public key and identity information, certified by a trusted authority. 

Private Key (formats: .key, .pem): Contains a secret key, used to decrypt data and for signing your communications.

.pfxor .p12 files: Bundles your certificate and private key, offering a convenient single-file option.

3. Certificate password

This password is required for password-protected certificates, typically used in conjunction with .pfx or .p12 files. It is used to decrypt the certificate, enabling its use in secure communications.

Procedure

1. Navigate to the CERTIFICATES tab in ADVANCED MODE.
2. Enable the Use mTLS option. 
3. Choose your certificate type. If your certificate file is password-protected, enter the password.
4. Click CREATE