How Do I Add or Replace a TLS Certificate for a PostgreSQL Connection?

Question

How can I add or update the TLS certificate for a single PostgreSQL connection without affecting other connections?

Environment

All PostgreSQL connectors

Answer

Before replacing an existing certificate, check whether other connections use it:

1. Go to Account Settings > General > Validated Certificates & Keys.
2. Search for the certificate to see which connections are associated with it.
3. If no other connections use the certificate, revoke it. For more information, see Revoke a certificate or key.
4. If other connections use the certificate, leave it in place until those connections have been updated or no longer require it.

To validate a new certificate for the PostgreSQL connection you want to update:

1. Go to your PostgreSQL connection page.
2. In the top right, click the more options menu icon.
3. Click Test connection.
4. If we detect a self-signed or private CA TLS certificate, validate and accept it when prompted.

After validation, the certificate appears in Account Settings > General > Validated Certificates & Keys.

For more information, see Validated Certificates & Keys.