Secure connections with SSL
The Certificates page provides a central location to manage TLS certificate material used by Trellix Wise™ for Private Cloud. Trellix Wise™ for Private Cloud supports two certificate types:
Inbound SSL/TLS Certificate: Secures HTTPS connections to the UI and APIs.
Outbound Trust Bundle: Contains certificates trusted when connecting to external systems.
The SSL Certificates table displays Domain, Issuer, Type, Status, and Expiry Date. Status values include Active, Warning, and Expired. Warning: Certificate renewal is a manual process.
Prerequisites
Obtain the required certificate material in PEM format.
For an inbound certificate, obtain the certificate body and matching private key.
For an outbound trust bundle, obtain the certificate bundle in PEM format.
Add an inbound SSL/TLS certificate
Provide the required PEM material to secure UI and API connections.
Log in to Trellix Wise™ for Private Cloud.
Go to Settings > Users > Certificates.
Select Add Certificate.
Select the Inbound SSL/TLS Certificate tab.
Enter the Domain, if applicable.
Enter the Certificate Body and Certificate Private Key.
Enter the Certificate Chain, if applicable.
Select Validate.
Review the Parsing & Validation Results.
Select Save.
Add an outbound trust bundle
Upload a trust bundle for external systems.
Important Saving an outbound trust bundle automatically restarts the integration, egress, consumer, and managed-MCP pods. Plan for a brief service interruption to these components.
Go to Settings > Users > SSL Certificates.
Select Add SSL Certificate.
Select the Outbound Trust Bundle tab.
Review the warning about the service interruption.
Enter the Certificate Bundle (.PEM).
Select Validate.
Review the Parsing & Validation Results and validation messages.
Select Save.
Renew an SSL certificate
Replace expiring certificate strings manually.
Go to Settings > Users > SSL Certificates.
Select the menu at the end of the row for the certificate to renew.
Select the Replace that opens the Edit SSL Certificate dialog.
Verify the Type. The certificate type cannot be changed.
Enter the renewed Domain, Certificate Body, Certificate Private Key, and Certificate Chain under Paste Renewed Certificate Strings.
Select Validate and review the Parsing & Validation Results.
Select Update to save the renewed certificate.
Delete an SSL certificate
Remove an entry from the SSL Certificates table.
Go to Settings > Users > SSL Certificates.
Select the menu at the end of the row for the entry to remove.
Select the option that opens the Delete Domain dialog.
Review the confirmation.
Select Delete.