LIVEcommunity - Who Me Too'd this solution

Any certificate is fine, as long as you have the private key for it. It doesn't matter if it's a CA, end-entity, key signing, etc. It doesn't have to be trusted or installed on the client either. It's just so the portal can encrypt the cookie, and then the gateway can decrypt it. The only real requirement here is that you have to use the same cert on both portal and gateway for cookie encrypt/decrypt, otherwise it won't work.

If you don't encrypt it, that's fine. If you don't specify one, it's just not an encrypted cookie. It'll still work just fine, but without the extra security of encryption for the auth cookie.

View solution in original post

Who Me Too'd this solution

Community Manager

Me Too date:

Unlock your full community experience!

Who Me Too'd this solution