Real-Time Record Import Certificate and Certificate Rotation

The upgraded version of the Real-Time Record Import feature uses certificate-based authentication instead of SuiteSignOn to validate real-time record import requests.

Certificates are valid for a finite period. After the initial set up, SuiteProjects Pro generates a new certificate and saves it to both NetSuite and SuiteProjects Pro automatically one to two weeks before the previous certificate expires.

You can use the NetSuite Connector Health Check feature to verify whether there is a valid real-time record import certificate in your account, and when the current certificate expires if valid.

If the health check shows "No valid certificate available for real-time import", use the following steps to generate and save the certificate.
Otherwise, the health check shows "Current real-time import certificate is valid until <expiry date>".

You can trigger the certificate generation and rotation from the contextual tips menu at any time.

To generate a new certificate for real-time record imports:

In SuiteProjects Pro, go to Administration > NetSuite Connector.
Click the Tips button then click Generate new real-time import certificate. SuiteProjects Pro generates a new certificate, uploads it in the custcertificate_oa_realtime certificate record in NetSuite, and saves it in SuiteProjects Pro after it is successfully uploaded in NetSuite.

Note:

This health check recommendation shows only if the Enable NetSuite single sign-on or Enable NetSuite real-time integration and the Use OAuth 2.0 for NetSuite Single Sign-On Integration and Real-Time Record Import boxes are checked on the NetSuite Connector administration form in SuiteProjects Pro.

However, certificates are generated and saved automatically in NetSuite and SuiteProjects Pro only if the upgraded version of the Real-Time Record Import feature is set up in NetSuite. For more information about setting up the upgraded version of the Real-Time Record Import feature in NetSuite, see Configuring Real-Time Record Import from NetSuite into SuiteProjects Pro.

Certificate Generation Troubleshooting

The SuiteProjects Pro Real-time Add-on bundle (Bundle ID 369630) 3.0 or later version adds the custcertificate_oa_realtime certificate record. The default certificate openair-certificate.pem associated with the custcertificate_oa_realtime certificate record is not valid. It is a required placeholder and it is replaced by a new certificate as part of the initial setup and periodically thereafter as part of the automatic certificate rotation.

If attempting to generate the certificate using the above steps results in the error Certificate "custcertificate_oa_realtime" not found, the certificate record may have been accidentally deleted in NetSuite. In this case, recreate the certificate record.

To recreate the certificate record in NetSuite:

In NetSuite, go to Documents > Files > File Cabinet.
Locate the file cabinet directory for the SuiteProjects Pro certificates (SuiteBundles > Bundle 369630 > OpenAir Certificates).
Next to openair-certificate.pem, click Download to save the certificate file to your computer.
Go to Setup > Company > Certificates.
Click Create New.

The new certificate window appears.
Enter the following certificate details
- Name: SuiteProjects Pro real-time
- ID: _oa_realtime
On the Files tab, click Choose a file and select the openair-certificate.pem you saved to your computer earlier.
Click Save.

After you save the certificate in NetSuite, try generating the certificate in SuiteProjects Pro.