Configure certificate authorities

AI-generated summary

Genesys Cloud supports both Managed and Remote digital certificates to establish secure TLS connections for various components and devices, with Managed certificates exclusively configured and maintained by Genesys for Edge components, managed phones, and remote SIP devices, while Remote certificates can be imported by uploading .crt files or pasting certificate text directly into the system. Users with appropriate Telephony > Plugin > All permissions can add, edit, and delete remote certificate authorities through the Admin interface under Certificate Authorities, though managed certificates cannot be modified. The platform enables comprehensive certificate management including editing of remote certificates by adding or removing associated services and straightforward deletion processes, with the Type column distinguishing between managed and remote certificate authorities. These digital certificates apply specifically to BYOC Premises deployments and ensure trusted authority identification through encryption. Genesys Cloud provides extensive support resources including community assistance, feedback mechanisms, and detailed documentation covering key technical specifications such as BYOC TLS trunk transport protocols for both Cloud and Premises deployments, Certificate Authority changes for Microsoft Teams integration, mutual TLS (mTLS) certificate requirements, contact center XML configuration file generation, and data actions configuration requests, with additional resources addressing privacy policies and related articles on BYOC implementation, TLS security protocols, and system configuration procedures.

PrerequisitesClick to expand

Note: The digital certificates described in this article only apply to the BYOC Premises. For information on digital certificates for BYOC Cloud, see .

Digital certificates ensure the identification of a trusted authority through encryption. Genesys Cloud supports two types of digital certificates: Managed and Remote.

Managed

There is only one managed digital certificate for your Genesys Cloud organization and it is set up and managed by Genesys. Genesys Cloud uses this managed certificate authority to create trusted TLS connections for components such as the Edge and managed phones. This managed certificate authority also allows remote SIP devices to trust and accept secure connections to External Trunks connected to the Edge.

Remote

You can add remote certificate authorities in Genesys Cloud by importing the digital certificate files issued to your organization. These remote digital certificates allow the Edge to trust a remote TLS endpoint.

Note: You cannot add, edit, or delete managed certificate authorities. The Type column identifies certificate authorities as managed or remote.

Add a remote certificate authority

There are two ways that you can import a remote digital certificate into Genesys Cloud.

Click Menu > Digital and Telephony > Telephony > Certificate Authorities.
Click Add.
Under Add Certificate Authority, select the appropriate option.

Upload from computerClick to expand

Paste text from a fileClick to expand

In the Select Service for Use box, type or select the appropriate services from the list.
Click Save Certificate Authority.

Edit a remote certificate authority

Learn how to edit a remote certificate authorityClick to expand

You can edit a remote certificate authority by adding or deleting a service.

Click Menu > Digital and Telephony > Telephony > Certificate Authorities.
Click the check box next to the common name.
Click Edit.
In the Select Services for use box
- To delete an existing service, select the service type and click Remove.
- To add a new service, select the appropriate service type from the list.
Click Save Certificate Authority.

Delete a remote certificate authority

Learn how to delete a remote certificate authorityClick to expand

[NEXT] Was this article helpful?

Get user feedback about articles.

Managed

Remote

Note: You cannot add, edit, or delete managed certificate authorities. The Type column identifies certificate authorities as managed or remote.

Add a remote certificate authority

There are two ways that you can import a remote digital certificate into Genesys Cloud.

Click Menu > Digital and Telephony > Telephony > Certificate Authorities.

Click Add.

Under Add Certificate Authority, select the appropriate option.

Upload from computerClick to expand

Paste text from a fileClick to expand

In the Select Service for Use box, type or select the appropriate services from the list.

Click Save Certificate Authority.

Edit a remote certificate authority

Learn how to edit a remote certificate authorityClick to expand

You can edit a remote certificate authority by adding or deleting a service.

Click Menu > Digital and Telephony > Telephony > Certificate Authorities.
Click the check box next to the common name.
Click Edit.
In the Select Services for use box
- To delete an existing service, select the service type and click Remove.
- To add a new service, select the appropriate service type from the list.
Click Save Certificate Authority.

Configure certificate authorities

Managed

Remote

Add a remote certificate authority

Edit a remote certificate authority

Delete a remote certificate authority

[NEXT] Was this article helpful?

Loading...

Configure certificate authorities

Managed

Remote

Add a remote certificate authority

Edit a remote certificate authority

Delete a remote certificate authority

[NEXT] Was this article helpful?