---
title: "Add certificates to your trust store"
url: "https://docs.yugabyte.com/stable/yugabyte-platform/security/enable-encryption-in-transit/trust-store/"
---

# Add certificates to your trust store

Add certificates to the YugabyteDB Anywhere trust store.

Add certificates for third-party services

YugabyteDB Anywhere uses certificates to validate connections between YugabyteDB Anywhere and other external services, including:

- [LDAP](/stable/yugabyte-platform/administer-yugabyte-platform/ldap-authentication/ "LDAP")
- [OIDC](/stable/yugabyte-platform/administer-yugabyte-platform/oidc-authentication/ "OIDC")
- [Webhook](/stable/yugabyte-platform/alerts-monitoring/set-up-alerts-health-check/ "Webhook")
- [S3 backup storage](/stable/yugabyte-platform/back-up-restore-universes/configure-backup-storage/ "S3 backup storage")
- [Hashicorp Vault](/stable/yugabyte-platform/security/create-kms-config/hashicorp-kms/ "Hashicorp Vault")
- Other [YugabyteDB Anywhere high availability](/stable/yugabyte-platform/administer-yugabyte-platform/high-availability/ "YugabyteDB Anywhere high availability") replicas.

When using self-signed or custom CA certificates, to enable YugabyteDB Anywhere to validate your TLS connections, you *must* add the certificates to the YugabyteDB Anywhere Trust Store

## Add certificates to your trust store

To add a certificate to the YugabyteDB Anywhere Trust Store, do the following:

1. Navigate to **Admin > CA Certificates**.
2. Click **Upload Trusted CA Certificate**.
3. Enter a name for the certificate.
4. Click **Upload**, select your certificate (in .crt format) and click **Save CA Certificate**.

## Rotate a certificate in your trust store

To rotate a certificate in your YugabyteDB Anywhere Trust Store, do the following:

1. Navigate to **Admin > CA Certificates**.
2. Click the **...** button for the certificate and choose **Update Certificate**.
3. Click **Upload**, select your certificate (in .crt format) and click **Save CA Certificate**.

## Delete a certificate in your trust store

To delete a certificate in your YugabyteDB Anywhere Trust Store, do the following:

1. Navigate to **Admin > CA Certificates**.
2. Click the **...** button for the certificate and choose **Delete**, then click **Delete CA Certificate**.