Skip to content

Enable Self Signed Certificates with Privacera Platform#

This topic provides instructions for use of Self-Signed Certificates with Privacera services including Privacera Portal, Apache Ranger, Apache Ranger KMS, and Privacera Encryption Gateway.  It establishes a secure connection between internal Privacera components (Dataserver, Ranger KMS, Discovery, PolicySync, and UserSync) and SSL-enabled servers.


  1. SSH to the Privacera Host as ${USER}.

  2. Create and open 'config/custom-vars/vars.ssl.yml' to edit.

    cd ~/privacera/privacera-manager
    cp config/sample-vars/vars.ssl.yml config/custom-vars/
    vi config/custom-vars/vars.ssl.yml
  3. Set the passwords for the following configuration. Use strong passwords using alpha, symbol, numerical characters.



    You can enable/disable SSL for specific Privacera services. For more information, refer to Configure SSL for Privacera Services.

  4. Run Privacera Manager update.

    cd ~/privacera/privacera-manager
    ./ update
  5. For Kubernetes based deployments, restart services:

    cd ~/privacera/privacera-manager
    ./ restart