This guide will step you through the process of acquiring, converting, and implementing your CA certificate.
Certificate Authority (CA) overview
If customers want to use certificate-based authentication for their data integrations, then they'll need to purchase a certificate provided by a supported certificate authority. This guide describes the actions that need to be taken to procure and deploy a certificate correctly.
For definitions of common terms we use in this guide, please refer to our glossary of CA authentication terms in Anapedia.
Important notes about CA certificates
Which certificate should I buy?
These object identifiers (OlDs) may help your IT/Security team request the correct type of certificate:
- TLS Web Client Authentication (1.3.6.1.5.5.7.3.2)
- Email protection (1.3.6.1.5.5.7.3.4)
The Anaplan API doesn't support SSL certificates. SSL or server certificates primarily deal with network traffic and relationships between servers. S/MIME certificates deal with email ID-based encryption and authentication, which is needed for Anaplan API authentication.
Anaplan only supports the S/MIME certificates listed on our supported root CA certificates page.
Can I use CA certificates with Anaplan API v1.3?
No. CA Certificates are intended to be used in API v2.0 and Anaplan Connect v1.4 or higher.
CA Certificates aren't compatible with API v1.3 or Anaplan Connect v1.3.x.
What will I need for a successful implementation?
Collaboration with your internal IT/security and procurement teams
You'll need the help of your internal IT/security team to complete the certificate process and implement your new certificate into your current Anaplan integration setup.
If you have a procurement process in place, you'll also need to include this internal team to assist with obtaining (purchasing) your CA certificate from a certificate authority.
Your IT or procurement team may have knowledge of an existing relationship with a supported certificate authority that exists within your organization.
Your internal IT team will also be able to help if you require computer administrator privileges at any point.
Anaplan Tenant Administrator
You'll need to coordinate with the designated Tenant Administrator within your organization to successfully upload your converted "Public Certificate" into Anaplan's Administration page.
Installation of the OpenSSL command line tool
We'll be using the OpenSSL tool throughout this guide to generate the necessary files for Anaplan integration.
Additional internal teams
If you have an internal process that involves additional teams who are responsible for creating Anaplan integrations into your models, then you should involve those teams as early as possible.
CA certificate process for Anaplan API usage
Process walkthrough:
