Recommended Certificate Authority

[Ike@ACE]

Is there a Certificate Authority (CA) that PTC recommends? We're looking for a software suite type of certifier. Something we pay for so that we can certify multiple domains.

[VladimirN]

Quote: "PTC products do not provide, manage, or rotate certificates for customers" - https://www.ptc.com/en/support/article/cs330290 

More about CA:

• "Using a Custom Certificate and Private Key": http://support.ptc.com/help/edge_microserver/r5.4.6/en/index.html#page/edge_microserver/c_ems_wsems_custom_cert_private_key.html 
• "Configure Trust for a ThingWorx Certificate": https://support.ptc.com/help/vuforia/es_install/en/index.html#page/ES_Install_Help_Center/TWXCertScenarios.html 
• "Configuring ThingWorx Platform to use SSL/TLS HTTPS with a certificate signed by a Certificate Authority (CA)": https://www.ptc.com/en/support/article/CS231610 

[VladimirRosu · Accepted solution]

Hi Ike@ACE ,

We do not recommend a specific CA.

However, looking at my past experience, you should probably use a Public CA that is embedded in the current browsers trust store and in Java JRE truststore (eg: Coretto's distro) at the same time, with the mention that it should be at least in the JRE's trust store at least.

You can typically add a new CA via your company internal software distribution mechanisms, but on the cloud side it is not always guaranteed that Cloud providers will add a new CA if not already there.

BR