Two-Way SSL Certificates

Overview

Two-way SSL (Secure Sockets Layer) certification can be created when connecting to Aria, in addition to the ability to use IP whitelisting, as a security measure for connections from third-party applications. This support for two-way SSL-based authentication includes the following features:

The ability to manage third-party SSL certificates in Aria.
The validation of SSL certificate(s) during connections from third-party applications.

This documentation provides the prerequisites and steps for managing your SSL certificates in Aria.

Note: Aria does not support the use of self-signed certificates for two-way SSL certificates.

If you are not using two-way SSL, see Aria Billing APIs for the correct endpoint URLs.

To successfully complete SSL authentication, you will need to configure your applications that use two-way SSL and call Aria APIs to:

send the correct certificate to Aria; and
point to the correct URL listed below for the environment in which each application is running:

Environment

URLs for each API Category

Stage Future US
(United States)

Core API:

https://api.future.stage.ariasystems.net/v1/core

Object Query API:

https://api.future.stage.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.future.stage.ariasystems.net/AdminTools.php/Dispatcher

Stage Future AUS (Australia)

Core API:

https://api.future.stage.aus.ariasystems.net/v1/core

Object Query API:

https://api.future.stage.aus.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.future.stage.aus.ariasystems.net/AdminTools.php/Dispatcher

Stage Future EUR (Europe)

Core API:

https://api.future.stage.cph.ariasystems.net/v1/core

Object Query API:

https://api.future.stage.cph.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.future.stage.cph.ariasystems.net/AdminTools.php/Dispatcher

Stage Current US

Core API:

https://api.current.stage.ariasystems.net/v1/core

Object Query API:

https://api.current.stage.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.current.stage.ariasystems.net/AdminTools.php/Dispatcher

Stage Current AUS

Core API:

https://api.current.stage.aus.ariasystems.net/v1/core

Object Query API:

https://api.current.stage.aus.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.current.stage.aus.ariasystems.net/AdminTools.php/Dispatcher

Stage Current EUR

Core API:

https://api.current.stage.cph.ariasystems.net/v1/core

Object Query API:

https://api.current.stage.cph.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.current.stage.cph.ariasystems.net/AdminTools.php/Dispatcher

Production US

Core API:

https://api.ariasystems.net/v1/core

Object Query API:

https://api.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.ariasystems.net/AdminTools.php/Dispatcher

Production AUS

Core API:

https://api.prod.aus.ariasystems.net/v1/core

Object Query API:

https://api.prod.aus.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.prod.aus.ariasystems.net/AdminTools.php/Dispatcher

Production EU

Core API:

https://api.prod.cph.ariasystems.net/v1/core

Object Query API:

https://api.prod.cph.ariasystems.net/api/AriaQuery/objects.php

Admintools API:

https://api.prod.cph.ariasystems.net/AdminTools.php/Dispatcher

Prerequisites

To enable two-way SSL in Aria, complete these prerequisite steps:

Getting Here: Click Configuration > Client Settings > Miscellaneous Settings

Select the Use SSL Authentication client parameter.
Select True from the Value drop-down.
The default setting is False.

Click Save.

Create or Edit an SSL Certificate

Getting Here: Click Configuration > Integrations > SSL Certificates

Notes:

SSL certificates can be edited or deleted from the SSL Certificate page.
When you need to replace an expired SSL certificate, it is recommended that you add the new certificate, confirm that it works as expected with your applications, then delete the expired certificate.

Click New to create a new SSL certificate or click on a previously-created SSL certificate to update it.
The Create New SSL Certificate or Edit SSL Certificate page appears.
Enter or update the URL in the URL field (required).

Note: In the URL field, instead of a URL, you may enter a short name for a certificate to easily identify what it is used for. Example: "Aria Stage Current".

You will need to configure your applications that call Aria APIs to point to the correct URL for the environment in which each application is running. See the list of URLs above.

Click the Choose File button to upload or replace a certificate (required).

Note: An additional Password field appears if the certificate file is of PKCS12/PFX format.

Select a status from the Status drop-down.
A certificate can be deactivated at any time by selecting the certificate from the SSL Certificate page and changing its status from Active to Inactive.
Enter or edit the certificate's expiration date in the Expiration Date field
Enter or edit the description in the Description field.
Example: Enter information that will allow you to easily identify what the certificate is used for, such as "Certificate used in a test environment for the current version of Aria".
Click Save.