Database Management

Use a Custom SSL Certificate with DPA 2025.3 and above

The Keystore Management tool can be used to secure your DPA site via SSL using your own custom certificate.

First published date

1/5/2026 5:22 PM

Last published date

1/5/2026 5:22 PM

Overview

Starting with version 2025.3 of DPA, you may use the Keystore Management tool in DPA to ingest your SSL certificate. For best use, it is advised to use a .pfx file, as it contains the entire certificate chain required.

Product section

Database Performance Analyzer

Resolution

Place the certificate on the DPA server

Copy the certificate file and place it on the DPA server. The recommended location is:

DPA_installation_directory/iwc/tomcat/ignite_config

Specify the certificate location and credentials

Use the Keystore Management page to specify the location of the custom certificate and the credentials that allow DPA to access it. The credentials are encrypted and securely stored.

A keystore is a secure storage mechanism used to manage encrypted certificates and their keys.

  1. Log in to DPA as a user with administrative privileges.

  2. From the DPA menu in the upper-right corner, click Options.

  3. Under Administration > Configuration, click Keystore Management.

    The Keystore Management page opens.

  4. In the Keystore File Path field, enter the location and the file name of the certificate file.

  5. In the Keystore Password field, enter the password that allows DPA to access the keystore. This is the keypass and storepass specified when the certificate was generated.

  6. In the Key Pair Alias field, enter the alias that was specified when the certificate was generated(instructions below to obtain if it is unknown).

  7. Click submit.

When the new keystore configuration is applied, all logged in users must refresh the browser tab in which DPA is running. Depending on the browser's cache and SSL settings, it might take two or three minutes for the browser to recognize the new certificate. Clearing the cache may also be needed.

 

If the Alias is not known you may use the keytool that ships with DPA to obtain the Keystore Alias. To do so:

  • Open the Command Prompt as Admin
  • Navigate to the bin directory in your DPA installation folder(ex. C:\Program Files\SolarWinds\DPA\iwc\jre\bin)
  • Use keytool -list -v -keystore <YOUR_KEYSTORE_FILE> 

The Alias should be listed. If one was not generated at the time the .pfx was created, it may default to the number 1. Place the Alias in the Keystore Management Tool, as listed in step #6.