Question about Web Services integration and MTLS

Data Actions
1

I have a general question about setting up a Web Services integration using MTLS to hit an on-prem hosted web service. I have reviewed MTLS support for data actions - Genesys Cloud Resource Center, but seem to be missing something.

During the MTLS handshake process, doesn't the on-prem web service present its certificate to Genesys Cloud to verify? I am not understanding what CA's Genesys Cloud supports for this step in verification.

For reference, I am running under the assumption the below steps are the high level steps during the MTLS handshake process:

  1. ClientHello: (Genesys Cloud / data action sends a ClientHello to on-prem web service)
  2. ServerHello (On-prem web service responses with ServerHello and sends its server certificate)
  3. Server Certificate Verification: Genesys cloud verifies the servers certificate
  4. Client Certificate Request: The on-prem web service requests the clients mTLS certificate
  5. Client Certificate: Genesys cloud sends its client certificate (which will be signed by the root CA mentioned in the support article)
  6. Client Certificate Verification: The on-prem web services verifies the Genesys Cloud certificate (because the on-prem web service has imported the certificate mentioned in the support article and established a trust relationship with the Genesys Root CA)

This being said, I am stuck on step 3. If Cloud is validating the certificate sent by the web service - what CAs is Cloud using to verify against? Isn't the certificate being presented one that the customer is providing, or self-signed?

Thanks for any guidance.

1 Like
2

Data Actions require that the server present a publicly trusted certificate. Here is the FAQ for this:

--Jason

3

Not sure how I missed that, thanks!

4

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.