Creating digital certificates

You can use the SQL Anywhere Certificate Creation utility, createcert, to generate X.509 certificate files using RSA or ECC. See Certificate Creation utility (createcert).

You can use the SQL Anywhere Certificate Viewer utility, viewcert, to read X.509 certificates using RSA or ECC. See Certificate Viewer utility (viewcert).

You can follow the same process to create certificate files for server authentication. In each case, you create an identity file and a certificate file.

For server authentication, you create a server identity file and a certificate file to distribute to clients.

The certificate can be self-signed or signed by a commercial or enterprise Certificate Authority.

Self-signed certificates Self-signed server certificates can be used for simple setups. See Self-signed root certificates.
Enterprise root certificates An enterprise root certificate can be used to sign server certificates to improve data integrity and extensibility for multi-server deployments.
- You can store the private key used to sign server certificates in a secure central location.
- For server authentication, you can add MobiLink or database servers without reconfiguring clients.
See Certificate chains.
Commercial Certificate Authorities You can use a third-party Certificate Authority instead of an enterprise root certificate. Commercial Certificate Authorities have dedicated facilities to store private keys and create high-quality server certificates.
See Certificate chains, and Globally-signed certificates.

Creating digital certificates

SQL Anywhere Certificate Creation utility

SQL Anywhere Certificate Viewer utility

Certificates for server authentication

Certificate configurations