---
schema_version: "1"
id: 757432da6570c0ab837c40ce4a60984e706de8ce0648f71de1b01d257125e08e
title: Managing Host Certificates
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/partner-manager/latest/manage-host-certificates.md
canonical_url: https://docs.mulesoft.com/partner-manager/latest/manage-host-certificates
source_site: docs.mulesoft.com
content_type: documentation
content_hash: ee6b2e0dcdb76ff2d61a88f771edc05ffc2c85d1ceca0b9b62a820f0d7cfcaa3
description: MuleSoft Documentation Site
release: 2.x
latest: true
---
---
product: Partner Manager
version: 2.x
is-latest-version: true
---

# Managing Host Certificates

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Anypoint Partner Manager supports the following types of host certificates:

<table><colgroup><col> <col> <col></colgroup><thead><tr><th>Certificate Type</th><th>Description</th><th>Used by</th></tr></thead><tbody><tr><td><p>Identity key</p></td><td><div><div><p>Private key used for authentication</p></div></div></td><td><div><div><p>The following types of endpoints, when the authentication type is <code>Identity Key</code> or <code>Basic and Identity Key</code>:</p></div><div><ul><li><p>SFTP Receive from Partners endpoints owned by the host</p></li><li><p>SFTP Source at Host endpoints</p></li><li><p>SFTP Send to Partners endpoints owned by the host</p></li><li><p>SFTP Target at Host endpoints</p></li></ul></div></div></td></tr><tr><td><p>Public certificate</p></td><td><p>Certificate generated by a certificate authority (CA)</p></td><td><div><div><ul><li><p>HTTPS Send to Partners endpoints owned by the host, when the TLS context is set to <code>Use a self-signed certificate</code></p></li><li><p>HTTPS Target at Host endpoints, when the TLS context is set to <code>Use a self-signed certificate</code></p></li></ul></div></div></td></tr></tbody></table>

> [!NOTE] For AS2 endpoints, you must also configure at least one host keystore, as described in
> [Managing AS2 Host Keystores](https://docs.mulesoft.com/partner-manager/latest/manage-as2-host-keystores).

## Add a Host Certificate

To add a host certificate:

1.  In the sidebar, access the **<host>** page.

2.  In the **Certificates** section, click **New**.

3.  Select a certificate type.

4.  Enter the settings for the selected certificate type:

    - [Public Certificate](#public-certificate)

    - [Identity Key](#identity-key)

5.  Click **Save**.

### Public Certificate Settings

To configure settings for a public certificate:

1.  In the **Certificate name** field, enter the name of the public certificate.

2.  In the **Certificate** field, click **Choose file** and select a public certificate.

### Identity Key Certificate Settings

To configure settings for an identity key certificate:

1.  In the **Identity Key Name** field, enter the name of the identity key certificate.

2.  In the **<host> Identity Key PEM File** field, click **Choose file** and select an identity key
    certificate.

3.  In the **Key Passphrase** field, enter a passphrase for protecting the identity key certificate.

4.  In the **Expiration Date** field, optionally enter an expiration date for the certificate. This
    date is a reminder for you, but Anypoint Partner Manager doesn’t enforce it.

## Update a Host Certificate

Update a host certificate by selecting a different certificate file to associate with the it:

1.  In the sidebar, access the **<host>** page.

2.  In the **Certificates** section, click the name of the certificate that you want to update.

3.  Click **Edit**.

4.  Click **Choose File** and select a certificate file.

5.  Click **Update**.

## Remove a Host Certificate

If a host certificate isn’t associated with an endpoint, you can remove it from Anypoint Partner
Manager:

1.  In the sidebar, access the **<host>** page.

2.  In the **Certificates** section, hover over the name of the host certificate to remove.

3.  Click the trash can icon on the right.

## Enforce Certificate Expiration Dates for AS2 Requests

To prevent inbound AS2 requests with expired certificates from being processed by Anypoint Partner
Manager:

1.  In the sidebar, access the **<host>** page.

2.  In the **Global endpoint settings** section, click **AS2** in the **Inbound endpoint settings**
    column.

3.  Select **Enforce AS2 certificate expiration date**.

4.  Click **Save**.

## See Also

- [Certificate and Keystore Storage](https://docs.mulesoft.com/partner-manager/latest/certificates)

- [Configuring and Managing a Host Profile](https://docs.mulesoft.com/partner-manager/latest/configure-host)

- [Managing Partner and Third-Party Connection Certificates](https://docs.mulesoft.com/partner-manager/latest/manage-partner-certificates)