Custom SSL Certificates in Docker
This guide explains how to configure custom SSL certificates for Azure AD integration, enterprise Certificate Authorities (CAs), and other trusted certificate requirements in your Dataedo Docker deployment.
Supported Certificate Formats
Dataedo Portal automatically detects and processes various certificate formats:
.pem
- PEM format (text with headers).cer
- Certificate format (PEM or DER, auto-detected).crt
- Certificate format (ready to use).cert
- Certificate format (PEM).der
- DER format (binary)
The system automatically detects the certificate format by analyzing the file content, not its file extension. This ensures maximum compatibility with certificates from different sources.
Certificate setup
1. Prepare your certificates (with Azure SAML example)
First, prepare the certificates you want to use. As an example, we'll use Azure SAML integration.
- In the Azure Portal, open your Enterprise Application for the Dataedo Portal
- Navigate to Single sign-on → SAML Certificates
- Download "Certificate (Base64)" - this gives you a
.cer
file in PEM format
2. Upload the certificates to the Docker environment
Connect to your Docker environment, create a local directory and place your certificate files inside:
mkdir ./certs
# Copy your certificate files to the new folder
cp your-certificate.cer ./certs/
3. Update Docker Compose
Add the certificate volume mount to your docker-compose.yml
, eg, by running nano docker-compose.yml
:
services:
backend:
image: dataedo/web_api:stable
volumes:
- ./certs:/certs:ro # Mount certificates as read-only
# ... other configuration
4. Start Your Container
sudo docker compose down
sudo docker compose up -d
The certificates will be automatically installed during container startup.
5. View Startup Logs
To verify certificate installation, check the container logs:
docker compose logs backend
You'll see output like this during container startup:
Detected mounted certificates in /certs - installing certificate support...
Installing certificate management packages...
Processing certificate: azure-sso.cer
✓ Converted PEM format to CRT
Installing 1 custom certificate(s) system-wide...
✓ Custom certificates successfully installed and available system-wide
Cleaning up package cache...