Query Regarding Enabling SSL Pinning and Certificate Rotation in Dynatrace OneAgent SDK

[PoojaPandit]

Hi @team,

Could you please help me with a query regarding the Dynatrace OneAgent SDK?

We would like to understand how SSL pinning can be enabled along with SSL certificate rotation in the OneAgent SDK. Specifically:

• Is SSL pinning handled internally by the OneAgent SDK?

• If yes, is certificate rotation also supported automatically?

• If not, what steps are required from the application side to enable these securely?

• Are there any official documentation links or implementation guidelines available?

Looking forward to your support on this.

Thanks & Regards,
Pooja Pandit

[radek_jasinski · Accepted solution]

Hi @PoojaPandit 

In my opinion:

• SSL pinning is not handled automatically by the OneAgent SDK and must be configured manually using Androi Network Security Configuration or Info.plist on iOS.
• Certificate rotation is not supported automatically, so pinned certificates must be manually updated in the app.
• The application must implement platform-specific SSL pinning (network_security_config.xml or DTXPublicKeyPins) and update these settings when certificates change.

Radek