Using certificates

The Recorder and browser agents support using client-side certificates while recording and playing back a script. The Recorder uses industry standard PKCS12 certificates that have a .p12 file extension.

The Certificate Manager lists the certificates that are available by default to the Recorder and agents when recording a script. To open the Certificate Manager, select File > Certificates.

The certificates are organized by category tabs.

  • Your Certificates – Certificates issued by an organization to identify you. This category does not include any default certificates. Certificates imported in this category must be PKCS12 (.p12 or .pfx) files.
  • People – Certificates that identify other people. This category does not include any default certificates. Certificates imported in this category must be one of these formats: .crt, .cert, .cer, .pem, or .der.
  • Servers – The Recorder includes certificates for commonly used servers. These default certificates are listed by company/organization.
  • Authorities – The Recorder includes commonly required certificates from certificate authorities. These default certificates are listed by organization.
  • Other – Any certificate on file in the Recorder that does not belong in another category.

For certificates that are not listed, import the certificate as described below. The process to add a certificate depends on whether the certificate is required while recording or playing back the script.

Providing website certificates for recording

You may need to provide a certificate when recording a script so that the Recorder will supply the certificate to a site that requires it. Before recording the script, use the Certificate Manager to import the certificate. Note the following:

  • You can add more than one certificate to the Recorder.

  • This certificate is used only when recording a script.

  1. Select File > Certificates to open the Certificate Manager.

  2. Select the Your Certificates tab and click Import.
    The procedure for importing certificates in other categories is similar, except that different categories require different certificate file formats.

  3. In the Certificate File to Import dialog box, navigate to and select the PKCS12 (.p12) certificate, then click Open.
    The Password Entry dialog box appears.

  4. Enter the password for the selected PKCS12 certificate.
    Password entry dialog

  5. The certificate is imported into the Recorder's certificate store and is displayed on the Your Certificates tab.
    Certificate manager - your certificates

Providing client-side certificates for playback

You may have to provide client-side certificates (client SSL certificates) for securing client access when playing back a script. Note the following:

  • The certificate must be a PKCS12 (.p12) file.
  • You can only add one certificate per script.
  • The certificate's password is displayed in the Playback tab of the script settings. It is not encrypted.
  • The Recorder does not validate the certificate or the certificate password.
  • The certificate is used only on playback.

Define a certificate at the script level:

  1. With the script open in the Recorder, select Script next to the script timeline to display the script settings tabs.

  2. Select the Certificate tab to add a certificate or to delete, export, or replace an existing certificate.
    Add a certificate

  3. In the Certificate tab, select Add Certificate. The Select Certificate dialog box appears.

  4. Navigate to and select the certificate, then click Open.
    The Certificate tab displays a password field.

  5. Enter the password for the certificate. Note that the password is not encrypted.
    Certificate password field

When you play back the script, this certificate and password are used.

Managing certificates

Options for recording certificates

In the Certificate Manager, the following options are available depending on the tab you have selected.

View

This option is available for all certificate categories. Select a certificate and click View to display the certificate details.

Backup and Backup All

These options are available only for Your Certificates. Use them to create backup file from which you can re-import the certificates if necessary.

Import

This option is available for all categories except Others. Use it to add a certificate in the selected category.

Export

This option is available for the People, Servers, Authorities, and Others categories. You can export the selected certificate to a file in a variety of certificate file formats.

Edit Trust

This option is available for the People, Servers, and Authorities categories. It displays the Edit <Certificate> Trust Settings dialog box. Select or clear the settings as needed.

Add Exception

This option is available only for Servers certificates. You can use it to override the certificate for a specified website.

Warning

Legitimate sites should not ask you to override. Use this option with extreme caution.

Delete

This option is available for all categories.

Warning

Deleting a certificate cannot be undone.

In the Authorities tab, the option is Delete or Distrust. The selected certificate will not be deleted, but all trust will be removed, which has the same effect.

Options for playback certificates

After you add a certificate to a script, options are available to Export, Replace, or Delete the certificate.

Delete a certificate

Warning

Deleting a certificate cannot be undone.

  1. Click Delete. A warning message appears.

  2. Click OK to confirm the deletion of this certificate.

Export a certificate

Exporting the certificate creates a file of the certificate.

  1. Click Export. The Export Certificate dialog box appears.

  2. Enter a name and click Save. The certificate is saved as a .p12 file.

Replace a certificate

Replacing a certificate deletes the existing certificate and adds the new certificate to the script.

  1. Click Replace. The Select a File dialog box appears.

  2. Select the certificate from the dialog box and click Open.

  3. Enter the password for this certificate in the field.

When you play back the script, this certificate and password will be used.