As part of our CI/CD with Azure, we were able to successfully authorize an Org using the JWT-Based Flow AS LONG AS we follow the steps here

Every time we refresh our sandboxes, we have to go through the whole process again, which is a bit of a pain.

Question is, do you guys know if I can generate a server.key file (which is requried by the JWT Flow) from a self-signed certificate created within Salesforce, and not openssl?


1 Answer 1


After you create a self-signed cert in SF, you can export the keypair (private key/public key) as a JKS keystore. You can then extract the private key from the keystore via either keytool (ships with Java runtime) or OpenSSL.

  • Thanks, @identigral!
    – Rodrigo
    Commented Sep 3, 2019 at 17:13
  • remember to accept the answer if it helped resolve your query.
    – glls
    Commented Sep 13, 2021 at 19:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .