---
title: "Managing Certificates"
canonical: "https://docs.infoblox.com/space/nios90/280266962/Managing%20Certificates"
format: markdown
---
<span style="color: #000000">This section covers the following:</span>

> Macro (children)


> ⚠️ **Note**
> ⚠️ 
> ⚠️ NIOS does not support SHA1 certificates. Do not generate Apache and CA certificates by using the SHA1 option although the option is available in the Grid Manager UI.

<span style="color: #000000">The NIOS appliance generates a self-signed certificate when it first starts. A self-signed certificate is signed by the subject of the certificate, and not by a CA (Certificate Authority). This is the default certificate. When your computer first connects to the NIOS appliance, it sends this certificate to authenticate itself to your browser.</span>  
<span style="color: #000000">Because the default certificate is self-signed, your browser does not have a trusted CA certificate or a cached NIOS appliance server certificate (saved from an earlier connection) to authenticate the NIOS appliance certificate. Also, the hostname in the default certificate is </span><span style="color: #000000">*www.infoblox.com,*</span><span style="color: #000000"> which is unlikely to match the hostname of your NIOS appliance. Consequently, messages appear warning that the certificate is not from a trusted certifying authority and that the hostname on the certificate is either invalid or does not match the name of the site that sent the certificate. Either accept the certificate just for this session or save it to the certificate store of your browser.</span>  
<span style="color: #000000">To eliminate certificate warnings, you can replace the default self-signed certificate with a different certificate that has the hostname of your NIOS appliance. The NIOS appliance supports X.509 certificates in .PEM format. After the initial login, you can do one of the following:</span>

- <span style="color: #000000">Generate another self-signed certificate with the correct hostname and save it to the certificate store of your browser.</span>
- <span style="color: #003300">Request a CA-signed certificate with the correct hostname and load it on the NIOS appliance. For more information, see </span><span style="color: #003300">[Generating Certificate Signing Requests](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/1321108314)</span><span style="color: #003300">.</span>
- <span style="color: #000000">When you receive the certificate from the CA, upload it to the appliance. Additionally, you can upload a certificate along with the private key, as described in </span><span style="color: #000000">[Uploading HTTPS Certificates](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/1320356211)</span><span style="color: #000000">.</span>
- <span style="color: #000000">Download the certificate from a trusted CA, as described in </span><span style="color: #000000">[Downloading Certificates](https://infoblox-docs.atlassian.net/wiki/spaces/nios90/pages/1321174097)</span><span style="color: #000000">.</span>