Skip to content

Install an X.509 Certificate

The following article shows how to install an X.509 certificate for transport encryption.
The installation of an X.509 certificate is required to use Transport Layer Security (TLS) and secure authentication with Xtract Universal.iQ.

About X.509 Certificates

There are two main approaches for creating an X.509 certificate:

  • Certificate released by an (internal) certification authority (CA)
  • Self-signed certificate

On test environments you can use a self-signed certificate. For production environment it is recommended to use a certificate released by an (internal) certificate authority (CA).

Depending on whether Xtract Universal.iQ is hosted on a local server or a cloud environment, the procedure for certificate creation differs. Refer to your network administrators for assistance.

Install the X.509 Certificate

Copy the valid X.509 certificate into the following directory inside the volume used by the Xtract Universal.iQ container:

xuiq/input/certs

For more information, see Knowledge Base Article: Container Directories.

Activate TLS in Xtract Universal.iQ

To activate TLS in Xtract Universal.iQ:

  1. Open the Settings menu and navigate to the Transport Layer Security section.
  2. Click [Pick certificate]. The "Pick certificate" window opens and lists all available certificates inside the container.
  3. Select a certificate. The window closes and details of the certificate are displayed in the settings.
  4. Activate the checkbox [TLS enabled].
  5. Click [Save].
  6. Restart the Xtract Universal.iQ container.

TLS is active and you can access the Xtract Universal.iQ web UI and services via HTTPS.

Last update: July 3, 2026
Written by: Valerie Schipka