Source
Amazon Root CA 1 certificate change and possible implications for users of Snowflake JDBC driver with older versions of IBM JDK
Older versions of IBM JDK may not contain the Amazon Root CA 1 certificate, which is going to be a new root certificate served by S3 endpoints. Customers operating on IBM JDK have to ensure they have this certificate in their truststores.
CE+ (Cyber Essentials Plus)
CE+ certification is required for organizations that plan to bid for central government contracts which involve handling sensitive and personal information or the provision of certain technical products and services.
FAQ: DigiCert Global Root G2 certificate authority (CA) TLS certificate updates
DigiCert has chosen to migrate to the newer root CA, and Snowflake is continuing to leverage DigiCert - signed certificates for some service endpoints. This change is being made because the current DigiCert Root CA certificate will expire…
Snowflake Postgres SSL certificates
In the navigation menu, select Postgres. In the More Options [⋮] menu at the top right, select Download Certificate. Select Download in the confirmation dialog. You can retrieve the root CA certificate from the certificate field returned…
How to check the expiration date of the SAML2_X509_CERT created in the security integration
You may check the validity of this certificate if you run this query: use role accountadmin; desc security integration <your - SAML - integration - name>; From the output of the above query, obtain the SAML2_X509_CERT value (in row 1).
How to import & configure certificate for SAP business objects connectivity to snowflake
User has to add the proper certificates to the SAP Java truststore file named cacerts. The below instructions are based on SAP blog blog.sap.com.1. Verify connectivity to SnowflakeSAP BusinessObjects has both a Windows client tool and a…
SSLHandshakeException due to missing Digicert Root CA G2
Snowflake regularly issues and renews TLS certificates in order to encrypt network traffic to Snowflake web services. Keeping your TLS client truststores up to date with the latest CA root certificates is essential for establishing secure…
Replacing OCSP with CRL as the method of certificate revocation checking
A key mechanism in this area has been OCSP, which enables user - agents (like browsers and Snowflake drivers) to validate in real - time that a TLS certificate has not been revoked.
Define Alternative Trust Store when running SnowSQL or Python Connector
Recently, your company added a self - signed certificate to all the SSL/TLS workflow that breaks the SSL certificate chain. You need to use a different trust store that includes the self - signed certificate rather than the publicly available…
SYSTEM$ISSUE_PER_ACCOUNT_CERTIFICATES
Causes Snowflake to maintain public TLS certificates on behalf of the account. These certificates are used for terminating TLS connections when you access Snowflake under account - specific hostnames that use nested subdomains.