Certificate alias in authentication service.

How authentication service pick the certificate if the mentioned alias certificate is disabled and jks has another valid certificate pega?

@SaiChaitanya If the certificate alias mentioned in the authentication service is disabled, Pega will not be able to use it for authentication. Pega does not automatically pick another certificate from the Java KeyStore (JKS). You would need to manually specify the alias of the valid certificate in the authentication service configuration.

:warning: This is a GenAI-powered tool. All generated answers require validation against the provided references.

Caught Exception while validating SAML2 Authentication - No trusted certs found

Importing external certificates into a Pega Keystore

Authentication services > Default configuration

@SaiChaitanya

pega doesnt have a feature to select a cert from list of certs in jks unless we specify the alias name

if the name is not specified it cannot use the other cert and it cannot authenticate