Signing Certificate
SALESFORCE ADMIN EIE TENANT ADMIN
Relationship Intelligence authenticates with an asymmetric key pair. Salesforce holds the private key; EIE holds the public certificate.
1. Create the certificate in Salesforce
Setup → Certificate and Key Management → Create Self-Signed Certificate
Label: EIE_RI_Signing
Unique Name: EIE_RI_Signing
Use RSA with a supported Salesforce key size and save.
Do not export or distribute the private key. It must remain inside Salesforce.
2. Download the public certificate
Download the public certificate from the same Setup page.
3. Register it in EIE
EIE → Connected Systems → Salesforce → Inbound Package Authentication → Register Signing Certificate
Upload .crt, .cer, or .pem, or paste the PEM text. Confirm the certificate status becomes Active.
4. Copy the Certificate KID
The KID is the SHA-256 fingerprint EIE uses to select the correct tenant-specific public signing key.
5. Save the KID in Salesforce
Paste the exact KID into the Relationship Intelligence Configuration record:
ribot__Signing_Certificate_KID__c
Rotation
To rotate: create a new certificate, register it in EIE, update the KID in Salesforce, verify, then remove the old certificate. Keep the previous certificate registered until verification with the new KID succeeds.
Was this helpful?
Last updated 1 month ago