Security Guidelines for Communications Between Sage X3 Components and the Internet/Intranet

To ensure secure and reliable communication across Sage X3 components and, in some cases, the Internet, we would like to clarify the guidelines regarding HTTPS usage and certificate management.

HTTPS Usage
HTTPS is mandatory if the environment is exposed to the Internet. This applies to components such as:

Syracuse
MongoDB
X3 Services
Database

Certificate Requirements

Internal/Intranet Use:
A self-signed certificate generated by your company is acceptable if the server is not publicly accessible on the Internet.

External/Internet Exposure:
If any component is accessible from the Internet, the certificate must be signed by a recognized Certification Authority (CA) to ensure proper validation and security.

Responsibility Disclaimer
Please note that Sage will not be responsible for any issues resulting from configurations that do not follow these guidelines.
Thank you for your attention and cooperation in maintaining a secure Sage X3 environment.

This Online Help Center page will soon be updated to reflect this information, and you should refer to it for further details.