This feature is part of VTEX Shield. If you're a current VTEX customer and want to adopt VTEX Shield for your business, please contact Commercial Support. Additional fees may apply. If you're not a customer yet but are interested in this solution, please complete our contact form.

VTEX automatically manages SSL certificates for stores by default, but merchants may need to use their own certificates for specific compliance reasons, internal security requirements, or certification entities that offer additional warranties.

To give them a flexible and secure way to upload their certificates to our infrastructure, we offer the SSL Certificates API and the SSL certificates page in the Admin.

This guide explains how to use the API for managing certificates.

The SSL Certificates API allows users to list their custom SSL certificates, get a specific certificate by ID, and install or renew a certificate.

Make sure you meet the following prerequisites to manage SSL certificates:

• You must have the Custom SSL certificates feature from VTEX Shield.
• You must have a user or API key associated with a role that contains the following License Manager resources:
  • Product: CDN API
  • Category: Certificate management
  • Resources: Update certificate and View certificate

To install a certificate, you can send its information through an Install or renew SSL certificate PUT request, using multipart/form-data or application/json. The process of renewing a certificate is the same as the process of installing one.

Request example - multipart/form-data

For the example account myaccountname and host mystore.com, the request should look like this:

Request example - application/json

For the example account myaccountname and host mystore.com, the request should look like this:

In both cases, whether installing or renewing a certificate, the response should look like this:

Find more details about each field in the Install or renew SSL certificate PUT reference.

You can list your certificates with the List SSL certificates GET endpoint, as shown below. Remember to replace the accountName and VtexIdclientAutCookie placeholders.

For the example account myaccountname, the request should look like this:

Find more details about each field in the List SSL certificates GET reference.

To get a specific certificate, you can use the Get SSL certificate by ID GETrequest. Remember to replace theaccountNameandVtexIdclientAutCookie` placeholders.

For the example account myaccountname and certificate ID 8c66122e-85cd-4bff-885d-aa9846e97541, the request should look like this:

Find more details about each field in the Get SSL certificate by ID GET reference.