From OpenEdge 13.1 onward, the OS certificate trust store is the default mode for PKI certificate chain validation across OpenEdge.

If your existing deployment uses the native OpenEdge certificate store (for example, certificates stored under $DLC/certs or a custom store set with -certstorepath), you can migrate to OS trust store to simplify certificate management.

Migrating to the OS trust store gives you:
  • Less certificate maintenance because trusted CAs are managed once in the OS.
  • Improved security and compliance through OS-managed trust policies.
  • Easy to maintain certificates without maintaining components-level truststores.
  • A cleaner configuration with fewer OpenEdge‑specific certificate tools to run.

If your CA certificates already exist in the OS trust store (for example, public CAs or enterprise-managed CAs), OpenEdge clients can use them immediately after migration.

Migrate from the native OpenEdge trust store to the OS-provided trust store

To perform this migration, follow these steps:
  1. Add each CA certificate from your OpenEdge native certificate store to the OS trust store on the same host:
  2. To confirm that certificate validation is working correctly with the OS-provided trust store, test the TLS connections.