Web Server Certificate

The certificate used for the main web server is stored in the keystore.jks file. If not present, Mirth® Connect will automatically create a new certificate upon startup. Since this auto-generated certificate is self-signed, you will see security warnings in your browser if you navigate to the HTTPS landing page.

You can replace this auto-generated certificate with your own company cert. This could still be self-signed or signed by an internal service if API/HTTPS access will only occur on your private company network. If you expose the API/HTTPS traffic over a publicly accessible DNS, you should replace this certificate with one that is signed by a CA (certificate authority).

For instructions on how to replace the web server certificate, look here: Application Data Directory