topic Query Regarding Enabling SSL Pinning and Certificate Rotation in Dynatrace OneAgent SDK in Dynatrace Managed Q&A

Query Regarding Enabling SSL Pinning and Certificate Rotation in Dynatrace OneAgent SDK

PoojaPandit — Tue, 01 Jul 2025 05:53:44 GMT

Could you please help me with a query regarding the Dynatrace OneAgent SDK?

We would like to understand how SSL pinning can be enabled along with SSL certificate rotation in the OneAgent SDK. Specifically:

Is SSL pinning handled internally by the OneAgent SDK?
If yes, is certificate rotation also supported automatically?
If not, what steps are required from the application side to enable these securely?
Are there any official documentation links or implementation guidelines available?

Looking forward to your support on this.

Thanks & Regards,
Pooja Pandit

radek_jasinski — Wed, 02 Jul 2025 11:09:55 GMT

In my opinion:

SSL pinning is not handled automatically by the OneAgent SDK and must be configured manually using Androi Network Security Configuration or Info.plist on iOS.
Certificate rotation is not supported automatically, so pinned certificates must be manually updated in the app.
The application must implement platform-specific SSL pinning (network_security_config.xml or DTXPublicKeyPins) and update these settings when certificates change.

Radek