{
  "schema_version": 2,
  "id": "operate/rs/security/certificates",
  "title": "Certificates",
  "url": "https://redis.io/docs/latest/operate/rs/7.4/security/certificates/",
  "summary": "An overview of certificates in Redis Enterprise Software.",
  "content": "\nRedis Enterprise Software uses self-signed certificates by default to ensure that the product is secure. If using a self-signed certificate is not the right solution for you, you can import a certificate signed by a certificate authority of your choice.\n\nHere's the list of self-signed certificates that create secure, encrypted connections to your Redis Enterprise cluster:\n\n| Certificate name | Description |\n|------------------|-------------|\n| `api` | Encrypts [REST API](https://redis.io/docs/latest/operate/rs/references/rest-api) requests and responses. |\n| `cm` | Secures connections to the Redis Enterprise Cluster Manager UI. |\n| `ldap_client` | Secures connections between LDAP clients and LDAP servers. |\n| `metrics_exporter` | Sends Redis Enterprise metrics to external [monitoring tools](https://redis.io/docs/latest/operate/rs/clusters/monitoring) over a secure connection. |\n| `proxy` | Creates secure, encrypted connections between clients and databases. |\n| `syncer` | For [Active-Active](https://redis.io/docs/latest/operate/rs/databases/active-active) or [Replica Of](https://redis.io/docs/latest/operate/rs/databases/import-export/replica-of) databases, encrypts data during the synchronization of participating clusters. |\n\nThese self-signed certificates are generated on the first node of each Redis Enterprise Software installation and are copied to all other nodes added to the cluster.\n\nWhen you use the default self-signed certificates and you connect to the Cluster Manager UI over a web browser, you'll see an untrusted connection notification.\n\nDepending on your browser, you can allow the connection for each session or add an exception to trust the certificate for all future sessions.\n",
  "tags": ["docs","operate","rs"],
  "last_updated": "2026-10-21T09:46:20-07:00",
  "children": [{"id":"operate/rs/security/certificates/create-certificates","summary":"Create self-signed certificates to install on a Redis Enterprise cluster.","title":"Create certificates","url":"https://redis.io/docs/latest/operate/rs/7.4/security/certificates/create-certificates/"},{"id":"operate/rs/security/certificates/monitor-certificates","summary":"Monitor certificates on a Redis Enterprise cluster.","title":"Monitor certificates","url":"https://redis.io/docs/latest/operate/rs/7.4/security/certificates/monitor-certificates/"},{"id":"operate/rs/security/certificates/updating-certificates","summary":"Update certificates in a Redis Enterprise cluster.","title":"Update certificates","url":"https://redis.io/docs/latest/operate/rs/7.4/security/certificates/updating-certificates/"},{"id":"operate/rs/security/certificates/ocsp-stapling","summary":"Use OCSP stapling to verify certificates maintained by a third-party CA and authenticate connection attempts between clients and servers.","title":"Enable OCSP stapling","url":"https://redis.io/docs/latest/operate/rs/7.4/security/certificates/ocsp-stapling/"}]
}