Enabling Conections to an Endpoint that is Chained to an Unknown Certificate Authority

In the rare case where your service exposes an HTTPS endpoint whose SSL certificate chains to a root Certificate Authority (CA) that isn’t among the list of CAs trusted by Windows, you must ingest that SSL certificate in order for the console to successfully establish communication to your service. To establish communication, within the endpoint configuration, under “Service Certificate Chain (Optional),” either select a previously ingested SSL cert or click Add New, and then perform the following procedure.

1. For Type, select SSL.
   
2. For Certificate file, upload a .p7b file that contains the full trust chain of your SSL certificate or a .p7b file that contains the full trust chain for the issuing CA of your SSL certificate. If your .p7b file contains the full trust chain of your SSL certificate, you must select Contains Leaf.
   
3. Click Add Certificate Chain.