Tech note: Salesforce certificate update

Salesforce will begin issuing certificates from the DigiCert G2 Global Root CA on 5th February 2026 at 5:00 PM UTC. To prevent connection failures to Salesforce, your Matillion ETL instance must trust this new root certificate. For more information, read Salesforce's Certificate Changes notification.

Customers who are using Salesforce connectors in their Matillion ETL jobs must download a new Root CA certificate and install it on their Matillion ETL instance before this date, as described below.

---

Applies to

• This applies to all Matillion ETL versions prior to 1.78.
• The base images of Matillion ETL versions 1.78 and later already include the new root certificate, and so no action is required. However, if you have upgraded to 1.78 or later (rather than migrating to a new instance), you may still be affected. If you are unsure, you should run this procedure regardless, and the new root certificate will be installed if required.
• If you are not using Salesforce connectors in any of your Matillion ETL jobs, no action is required.

---

What do you need to do?

1. Connect to your Matillion ETL instance via SSH.

2. Run the following commands to install the new root certificate:

   wget https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem
   sudo keytool -import -trustcacerts -alias digicertglobalrootg2_new -file DigiCertGlobalRootG2.crt.pem -cacerts
   

3. Enter the keystore password when prompted. The default password is changeit.

The update is now complete.