11 votes
Accepted

How do we migrate SSL certificate between sandboxes

Finally got the right way!, same certificates can be installed across sandboxes with the the below steps: On the source sandbox Security Controls -> Certificate and Key Management Click on Export to ...
Anil Shivaraj's user avatar
11 votes

How to renew SFDC Expiring Certificate?

Rename current certificate, then create a new self-signed certificate with a previous name. This way you won't need to update your code references, but might still need to update configuration (single ...
dzh's user avatar
  • 4,086
10 votes
Accepted

Importing a Java keystore (JKS) yields a "Keystore file is corrupted" message

The root cause of this issue is the change of default keystore format in Java 9: For approximately two decades, Java and keytool had relied on the JDK-specific JKS keystore type as its default store. ...
identigral's user avatar
  • 7,469
7 votes

How to renew SFDC Expiring Certificate?

The steps above seem to be incomplete: I tried to delete the old certificate and it said it was still being used. Here is my take: Email Warning: Sandbox: SFDC Expiring Certificate Notification ...
user2904480's user avatar
7 votes
Accepted

What is the difference between 2048 and 4096 key size?

Many services do not support 4096-bit keys. A web search came across So you're making an RSA key for an SSL certificate. What key size do you use?, where the author explains the primary differences ...
sfdcfox's user avatar
  • 487k
7 votes
Accepted

Do expired certificates for salesforce connected applications block connections?

As you have discovered, in the Salesforce world the alternative to client credentials grant for service-to-service calls is JWT Bearer. It is standardized (RFC 7523), Salesforce was one of the RFC ...
identigral's user avatar
  • 7,469
6 votes
Accepted

self signed vs CA signed certificate

Self-signed certificates are for applications with no public domain name that cannot be accessed outside a local or VPN network. CA certificates should be used for applications with a public domain ...
sfdcfox's user avatar
  • 487k
6 votes

Metadata API Apex fails to create fields in Connected App

I think the second problem you listed is causing the first problem, and unfortunately it's a bit of a layered answer. I'm also assuming that the MetadataService layer you've generated is all correct. ...
Clint's user avatar
  • 1,101
5 votes
Accepted

Question regarding default Salesforce client certificate being retired

Steven Lawrence from Salesforce answered me on November 14 about this, at the Salesforce Success Community Group about Salesforce Infrastructure. His answer was: Fortunately, this change does not ...
Renato Oliveira's user avatar
5 votes
Accepted

Certificate Expiration notification

To put in simple terms Self Signed Certificates are like false drivers licence .It provides security to a certain level but can be easily hacked but its still better than having nothing .Check this ...
Mohith Shrivastava's user avatar
5 votes
Accepted

Importing KvK NL CRT certificates to the Salesforce org

I'm afraid you're out of luck on this one. If you're making a callout (in Apex) from Salesforce to some external site, then that site needs to present a valid certificate chain that ends up pointing ...
Derek F's user avatar
  • 60.9k
4 votes

Certificate Expiration notification

Our implementation consultant created one for us when we went live. We spent about five days trying to figure out why, and never found anything. We let it expire. Nothing bad happened. :)
Lisa's user avatar
  • 174
4 votes
Accepted

Insufficient Privileges Certificate

I ran into this and even though it says 'Insufficient Privileges' when exporting the JKS file, it turned out that it was only giving that error because the password was not alphanumeric. I had to add ...
Joshuavd's user avatar
4 votes
Accepted

Automate setup of an external identity provider via APIs

Taking the summary out of comments for everyone's benefit: the screens you reference are for implementation of a scenario where an external service/app is acting as a SAML identity provider, SF is a ...
identigral's user avatar
  • 7,469
4 votes
Accepted

Connected app - packaging vs subscriber org and access token validity

The Connected App lives in your org. The subscriber's installed version is just a shadow of the original. Any changes you make to it will affect all orgs that use that Connected App. This is one of ...
sfdcfox's user avatar
  • 487k
4 votes

Expiring Certificate Notification - But No Certificates

As you mentioned that the list of certificates in your org is empty, it is because you are checking a different org than what is mentioned in the automated email received. Additional info adding to ...
Swetha Maddali's user avatar
3 votes

Number of Salesforce certified experts

It is because Application Architect is earned upon completion of other certifications: Salesforce Certified Application Architect For those who assess functional requirements from a declarative ...
o-lexi's user avatar
  • 3,094
3 votes

CA-Signed Certificates

You can use one CA signed certificate in multiple places as long as that CA signed certificate is valid and can be used in authentication by external system. You can export CA certificate in .jks ...
SfdcBat's user avatar
  • 4,781
3 votes

All SSO's got affected by changing Self Signed Certificate. What do I need to share with Vendors?

okay, this is rather old post, I would share what I know so far. In SSO, we have 2 certificates to select: One: Identity Provider Certificate. As name suggests, it is the certificate issued by your ...
Wayne Ni's user avatar
  • 600
3 votes

Import keystore in Certificate and Key Management

Maybe I'm resurrecting an old thread, but today I find out I also couldn't import a JKS in Salesforce as it was throwing: The data you were trying to access could not be found. It may be due to ...
Boris Bachovski's user avatar
3 votes
Accepted

Can I simply disable an automatically created identity provider?

Finally I figured it out. Looks like the identity provider and the certificate are used for other services. If you try to login to your org from any third party service provide, salesforce will ...
Salesforcesmarty's user avatar
3 votes

How to setup up a secure certificate for community

You can do it: Custom Domains: Using an Existing HTTPS Certificate With Your Community https://help.salesforce.com/articleView?id=000232390&type=1 It is possible to request a new HTTPS ...
Shay's user avatar
  • 31
3 votes
Accepted

Can someone let me know how to install root and intermediate certificates in salesforce?

I don't think that Salesforce is the issue here, at least not according to the description of the problem that you've given so far. To me, it sounds like Salesforce is trying to make a callout to ...
Derek F's user avatar
  • 60.9k
3 votes
Accepted

Create self-signed x509 certificate

You use OpenSSL for that. On Linux/macOS, a script like this will generate multiple certificates, if you need them (for multiple environments in a CI/CD context, for example). if [ -z "$1" ] then ...
Renato Oliveira's user avatar
3 votes
Accepted

ADM 201 will expire if I miss one maintanence exam?

Certification maintenance requirements are documented by Trailhead: Keep in mind: If you don’t complete your maintenance requirements by the completion due date, your credential(s) will expire. ...
David Reed's user avatar
  • 92.6k
3 votes
Accepted

How often does Salesforce change the keys at https://login.salesforce.com/id/keys?

I cross-posted this question to https://trailhead.salesforce.com/en/trailblazer-community/feed/0D54S00000GzB9Z and received the following answer from Sam Rosen, a Director on the Salesforce Identity ...
Rob's user avatar
  • 2,122
2 votes
Accepted

How to setup up a secure certificate for community

As it turns out, Salesforce does not allow you to import an existing, signed certificate. You have to go through the process of generating a new Certificate Signing Request, uploading that to your SSL ...
Swisher Sweet's user avatar
2 votes

Salesforce intermediate certificate chain

You need to concatinate two certificates - your signed one and intermediate one. This literatally means opening notepad, copy and paste one cert after another, so you end up with this: -----BEGIN ...
dzh's user avatar
  • 4,086
2 votes

How do we migrate SSL certificate between sandboxes

If you’re using Ant for deployment you can put the following in both your “Retrieve from Source” package.xml as well as your “Deploy to Target” package.xml : <types>   <name>...
2 votes

Insufficient Privileges Certificate

Make sure that your password is enough strong when you export a jks file to prevent Insufficient Privileges message.
JerSi's user avatar
  • 21

Only top scored, non community-wiki answers of a minimum length are eligible