Managing Certificates

Managing Certificates

You need to upload valid certificates into Salesforce, so the InCountry Data Residency for Salesforce package can perform data communication of regulated between Salesforce and InCountry Platform.

Getting certificates from InCountry

  1. You need to set up an account on the InCountry Portal.

  2. Create a new environment.

  3. Create a new Salesforce integration.

  4. Download certificates.

Generating Salesforce compatible certificates

warning

Under specific circumstances, the InCountry Portal may generate the certificate in the CER format instead of the CRT format. In the following instructions, you can find commands for both certificate formats.

  1. Install OpenSSL and Java Keystore locally.

  2. Open OpenSSL as an administrator and enter​:
    CRT certificate format:
    openssl pkcs12 -export -name signedcert -in <YourCertName>.crt -inkey<YourKeyName>.key -out keystore.p12
    CER certificate format:
    openssl pkcs12 -export -name signedcert -in <YourCertName>.cer -inkey<YourKeyName>.key -out keystore.p12

  3. Enter a password for the keystore between 6 and 8 characters.

  4. Use the following command for "signedcert" alias:
    keytool -importkeystore -destkeystore C:/temp/salesforce.jks -srckeystorekeystore.p12 -srcstoretype pkcs12 -alias signedcert

  5. Enter the same password as in step 3.

  6. Upload the JKS file to Salesforce (Setup > Security > Certificate and Key Management > Import from Keystore), and enter the password specified in steps 3 and 6.

  7. Set the certificate in Salesforce as SSO Request Signing, API Client, and/or Domain Certificate.

Uploading certificates

The InCountry Data Residency for Salesforce package requires certificates to perform the client-side requests to InCountry REST SDK. All the certificates must be provided in the JKS format.

You need to upload the following certificates:

  • incountry - the generic certificate for performing data requests to the InCountry Platform. This is a required certificate.

  • serverless - the certificate to perform serverless functions. This is an optional certificate.

  • batch - the certificate to perform batch data operations (for data migration). This is an optional certificate.

You will have to specify the certificate names in the corresponding InCountry REST API endpoints. Depending on your setup, some certificate may not be needed.

  1. Get a certificate from InCountry.

  2. From Setup, click Security, then select Certificate and Key Management.

  3. On the Certificate and Key Management page, click Import from Keystore.

    Import from Keystore

  4. Select the certificate file and enter the keystore password.

  5. Click Save.

Once you have uploaded the certificates, the InCountry Data Residency for Salesforce package is ready for operation.

note

If you receive the Data not available error when importing certificates, please do any of the following to bypass this issue:

  • Create a self-signed certificate in the Certificate and Key Management section.

  • Enable the Identity Provider and assign the self-signed certificate to it.

After performing these steps, you will be able to import the JKS certificates.

← Getting Started with Salesforce IntegrationConfiguring Data Regulation Policies →