This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

Note

: This feature is available in Lite, Enterprise, and Ultimate editions only.

Table of contents

• Certificates trust store
  • Java truststore
  • Keychain truststore
  • Windows truststores
    • Windows root truststore
    • Windows my user truststore
  • Custom truststore
    • Import certificates
    • Viewing and deleting certificates
  • Extended cloud certificates

You can manage trust store settings in DBeaver to enable secured driver downloads and establish SSL connections. This is achieved by selecting one of the available trust stores and, if needed, adding or removing certificates from the Custom Truststore. Certificates are integral to establishing secure connections, allowing necessary driver files to be downloaded, and enabling SSL connections to databases. Without the appropriate certificates, you might encounter an error message.

Certificates trust store

You can configure which trust store DBeaver uses to validate SSL certificates.

Java truststore

The Java Truststore is available on all platforms and contains the default Java certificates. You can view certificates stored here, but you can’t modify them directly. The app uses a local copy derived from the Java store together with auto-imported certificates.

Keychain truststore

On macOS, you can use the Keychain Truststore. This option relies on certificates stored in the system Keychain, and in the app it appears as a read-only view. The app builds a local copy for use, combining Keychain with default Java certificates and auto-imported certificates.

Note

Certificate management must be done in the macOS Keychain app.

Windows truststores

On Windows, two trust stores are available. Both appear in the UI, are read-only in DBeaver, and are used via a local copy built by the app together with default Java certificates and auto-imported certificates.

Windows root truststore

The Windows Root Truststore is machine-wide. Certificates added by an administrator at the OS level apply to all users on the machine.

Windows my user truststore

The Windows My Truststore contains certificates for the current user. It includes the machine root certificates per Windows behavior.

Note

: You cannot import any certificates into Windows trust stores from DBeaver. Manage them in Windows.

Custom truststore

Use the Custom Truststore to import and manage certificates inside DBeaver.

Import certificates

1. Navigate to Windows -> Preferences -> General -> Security -> Certificates Trust Store and click the Import button.

2. Browse your file system, locate the certificate file (.cer or .crt), and select it.

   

3. Assign an alias to the certificate and click OK.

   

4. After applying changes to the trust store and clicking Apply and Close, DBeaver prompts a dialog suggesting a restart for the trust store changes to take effect.

Once a certificate is added to the trust store, it enables secure connections and authentication. You can verify the validity of a certificate based on its expiration date.

Viewing and deleting certificates

In the Custom Truststore section, select the certificate and click the View button to see details. To remove a certificate, select it and click the Delete button.

Extended cloud certificates

Some cloud databases and services, like AWS, require additional certificate authorities (CAs) to work correctly.

To trust these cloud provider certificates automatically, enable Load extended cloud certificates in Certificates Trust Store settings.