# Digital certificates

## Definition

Soffid includes Digital certificate functionality as a security enhancement. You could add new Digital certificates, internal or external. If you select the external certificate, you could add a valid certificate to Soffid; If you select the internal certificate, Soffidl will generate a valid certificate.

## Screen Overview

#### Internal

[![image-1695885525346.png](https://bookstack.soffid.com/uploads/images/gallery/2023-09/scaled-1680-/image-1695885525346.png)](https://bookstack.soffid.com/uploads/images/gallery/2023-09/image-1695885525346.png)

#### External

[![image-1695885507434.png](https://bookstack.soffid.com/uploads/images/gallery/2023-09/scaled-1680-/image-1695885507434.png)](https://bookstack.soffid.com/uploads/images/gallery/2023-09/image-1695885507434.png)

## Standard attributes

#### Internal

- **Organization name**
- **Expiration date**: referring to the root certificate.
- **Device certificate**: Indicates if the certificate is for a device
- **Certificate duration (months)**: Referring to users' certificates.

#### External

- **Certificate:** root of the certification authority.
- **Organization name**
- **Device certificate: Indicates if the certificate is for a device**
- **Script to guess the certificate owner**: script to compute the user name. Can use the certificate and subject variables. Should return a valid user name.

## Actions

#### Digital certificates query

<table border="1" id="bkmrk-query-allows-to-sear-0" style="width: 100%;"><tbody><tr><td style="width: 16.5556%;">**Add new**</td><td style="width: 83.4444%;">Allows you to add a new certificate. You can choose that option on the hamburger menu or click the add button (+). To add a new certificate it will be mandatory to fill in the required fields.

</td></tr><tr><td style="width: 16.5556%;">**Delete**</td><td style="width: 83.4444%;">Allows you to remove one or more certificates by selecting one or more records and next clicking the button with the subtraction symbol (-).

To perform that action, Soffid will ask you for confirmation, you could confirm or cancel the operation.

</td></tr><tr><td style="width: 16.5556%;">**Download CSV file**</td><td style="width: 83.4444%;">Allows you to download a CSV file with the digital certificates data.

</td></tr></tbody></table>

#### New token

<table border="1" id="bkmrk-apply-changes-allow-" style="width: 100%;"><tbody><tr><td style="width: 12.4775%;">**Next**

</td><td style="width: 87.5225%;">Allows you to browse the wizard to create a new certificate.

</td></tr><tr><td style="width: 12.4775%;">**Apply changes**

</td><td style="width: 87.5225%;">Allows you to save the data of a new certificate or to update the data of a specific certificate. To save the data it will be mandatory to fill in the required fields

</td></tr><tr><td style="width: 12.4775%;">**Undo**

</td><td style="width: 87.5225%;">Allows you to quit without applying any changes.

</td></tr></tbody></table>