Client CAs
Store trusted certificate authorities for mTLS and choose project-local or workspace-shared scope.
A Client CA is a public certificate authority document that ReportPlane trusts to validate client certificates. It contains public trust material, not the CA private key.
Create a Client CA
Open Security → Client CAs → New Client CA.
Enter a clear name, paste the CA certificate in the expected PEM format, and choose the scope.
Scope
| Scope | Visible to |
|---|---|
| Project-local | The selected project |
| Workspace-shared | Projects in the same workspace, according to authorization |
Creating a workspace-shared CA requires workspace administrator or owner access.
Use a CA
Select the CA from an ingest or query client's mTLS authentication configuration. The runtime uses the relationship when validating a presented client certificate.
Delete safely
ReportPlane checks usage before deletion. A shared CA can affect several clients and projects. Remove or migrate every dependency before deleting it.
/management/v1/client-cas/management/v1/client-cas?project_id={projectId}/management/v1/client-cas/{id}