We created one custom extension and uploaded it through extension 2.0 but its giving the warning about we need distribute the root

[Abidyaseen]

We created one custom extension and uploaded it through extension 2.0 but its giving the warning about we need distribute the root certificate can anyone kindly guide us how we can distribute the certificate 

[AntonioSousa]

@Abidyaseen,

You need to upload the certs to the Dynatrace credential vault and to the OneAgents/Activegates.

Please follow the procedure described in:
https://docs.dynatrace.com/docs/extend-dynatrace/extensions20/sign-extension 

[PacoPorro]

The certificate distribution process ensures that only authorized and verified extensions can run in your Dynatrace environment. This prevents potential security risks from unauthorized or malicious extensions.
https://docs.dynatrace.com/docs/extend-dynatrace/extensions20/sign-extension

JMX extensions are excluded.
https://community.dynatrace.com/t5/Extensions/Documentation-Clarification-for-Certificates-in-2-0-Ex...

[Abidyaseen]

I got it but can you kindly tell we uploaded one certificate to the credential vault now do  we need to upload same to the activegate hosts or create a new one

[Mike_L]

The same one.

[MostafaHussein]

Salam Bro,

kindly after generating the certificate add it to the activegate or the oneagent as the below figure, see this link https://docs.dynatrace.com/docs/shortlink/sign-extension 

then upload it to credential vault as the following figure

BR,
Mostafa Hussein.

[Nicky23]

Hi @MostafaHussein I followed the steps you mentioned, but the warning about certificate distribution is still showing up. What can I do in this case? I have two ActiveGates, but I only copied the certificate to one of them. Do I need to copy it to the other ActiveGate as well?.

[david_lopes]

That warning will always show regardless if the certificates are present or not in the AGs, it is not checking the AGs, it is more of a reminder and you can ignore it if you already placed the certificate.

[Abidyaseen]

Salam Mostafa,

We have already uploaded the certificate in the dynatrace but we need to upload the same certificate to the activegates  i need some guidance how can we upload the certificate to the activegates because the certificate is in windows and we have to upload it in linux activegate servers

[Mike_L]

You need to place the certificate in a specific folder, like Antonio mentioned below: https://docs.dynatrace.com/docs/extend-dynatrace/extensions20/sign-extension 

[tarjei_utnes1 · Accepted solution]

The certificate needs to be in two places, on the activegates and on the Dynatrace Environment. 
It would be nice if you could push the certs that you had uploaded to the Dynatrace Environment, but as far as I know this RFE has not been done.