---
schema_version: "1"
id: 34a7c7f294694c334bebc0e236a9534b9c3b7a94b68dce86b696fd672c78ca71
title: Managing Partner and Third-Party Connection Certificates
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/partner-manager/latest/manage-partner-certificates.md
canonical_url: https://docs.mulesoft.com/partner-manager/latest/manage-partner-certificates
source_site: docs.mulesoft.com
content_type: documentation
content_hash: c3bd561ef036bb8a8b3249d647164b2f0961b0a2f5c4b8bf9327782bf4adba79
description: MuleSoft Documentation Site
release: 2.x
latest: true
---
---
product: Partner Manager
version: 2.x
is-latest-version: true
---

# Managing Partner and Third-Party Connection Certificates

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Anypoint Partner Manager supports the following types of partner and third-party-connection
certificates:

<table><colgroup><col> <col> <col></colgroup><thead><tr><th>Certificate Type</th><th>Description</th><th>Used by</th></tr></thead><tbody><tr><td><p>Public certificate</p></td><td><p>Certificate generated by a certificate (CA)</p></td><td><div><div><ul><li><p>AS2 Send to Partners endpoints</p></li><li><p>HTTPS Send to Partners endpoints</p></li></ul></div></div></td></tr><tr><td><p>Identity key certificate</p></td><td><div><div><p>Private key used for authentication</p></div></div></td><td><div><div><ul><li><p>SFTP Receive from Partners endpoints, when the authentication type is <code>Identity Key</code> or <code>Basic and Identity Key</code></p></li><li><p>SFTP Send to Partners endpoints, when the authentication type is <code>Identity Key</code> or <code>Basic and Identity Key</code></p></li></ul></div></div></td></tr></tbody></table>

## Add a Certificate

To add a partner or third-party-connection certificate:

1.  In the sidebar, access the **Partners** page.

2.  Click the partner or third-party connection that you want to create a certificate for.

3.  In the **Certificates** section, click **New**.

4.  Select a certificate type.

5.  Enter the settings for the selected certificate type:

    - [Public Certificate](#public-certificate)

    - [Identity Key](#identity-key)

6.  Click **Save**.

After you create a public certificate, you can assign it to the partner to use with AS2 Send to
Partners endpoints. To do this, hover over the AS2 cell in the row containing the certificate and
click **Assign**.

Assigning a certificate to a partner unassigns the previously-assigned certificate.

> [!NOTE] You can also add certificates when you create endpoints. For more information, see
> [HTTP and HTTPS Send Endpoint Settings](https://docs.mulesoft.com/partner-manager/latest/endpoint-https-send),
> [SFTP Receive Endpoint Settings](https://docs.mulesoft.com/partner-manager/latest/endpoint-sftp-receive-target), and
> [SFTP Send Endpoint Settings](https://docs.mulesoft.com/partner-manager/latest/endpoint-sftp-send).

### Public Certificate Settings

To configure settings for a public certificate:

1.  In the **Certificate name** field, enter the name of the public certificate.

2.  In the **Certificate** field, click **Choose file** and select a public certificate.

### Identity Key Certificate Settings

To configure settings for an identity key certificate:

1.  In the **Identity Key Name** field, enter the name of the identity key certificate.

2.  In the **<partner> Identity Key PEM File** field, click **Choose file** and select an identity
    key certificate.

3.  In the **Key passphrase** field, enter a passphrase for protecting the identity key certificate.

4.  In the **Expiration date** field, optionally enter an expiration date for the certificate. This
    date is a reminder for you, but Anypoint Partner Manager doesn’t enforce it.

## Update a Certificate

Update a partner or third-party certificate by selecting a different certificate file to associate
with it:

1.  In the sidebar, access the **Partners** page.

2.  Click the partner or third-party connection whose certificate to update.

3.  In the **Certificates** section, click the name of the certificate to update.

4.  Click **Edit**.

5.  Click **Choose File** and select a certificate file.

6.  Click **Update**.

## Remove a Certificate

You can remove an identity key certificate from Partner Manager if the certificate isn’t associated
with an endpoint.

You can remove a public certificate from Partner Manager if the certificate isn’t associated with an
endpoint and if it isn’t assigned to a partner or third-party connection.

To remove a certificate:

1.  In the sidebar, access the **Partners** page.

2.  Click the partner or third-party connection whose certificate you want to remove.

3.  In the **Certificates** section, hover over the name of the certificate configuration to remove.

4.  Click the trash can icon that appears on the right.

## See Also

- [Certificate and Keystore Storage](https://docs.mulesoft.com/partner-manager/latest/certificates)

- [Configuring and Managing Partners](https://docs.mulesoft.com/partner-manager/latest/configure-partner)

- [Configuring and Managing Third-Party Connections](https://docs.mulesoft.com/partner-manager/latest/configure-third-party)

- [Managing Host Certificates](https://docs.mulesoft.com/partner-manager/latest/manage-host-certificates)