I need help with this,
We are currently integrating with the HP Catalog Service API to automatically populate our product listings with HP’s content. For this integration, HP has a strict cybersecurity mandate requiring 2-way SSL encryption and IP whitelisting.
To proceed, HP requires the following specific technical information from our Shopify store’s infrastructure:
SSL Security Certificate Public Key Details:
Application name/Requester Name (Deploy-Tech LLC)
Serial Number
Common Name
Organization
Organization Unit
Certificate expiration date
Support contact (my email: [Your Email Address])
(HP requires an enterprise-level OV SSL or EV SSL certificate public key.)
Static IP Address(es) or IP Ranges:
HP needs the specific static IP address(es) or IP ranges from which outgoing API requests from our Shopify store (deploytechllc.com) will originate, for their IP whitelisting.
We understand that Shopify manages the SSL certificates and outgoing IP addresses for our store. We have reviewed HP’s Onboarding Guide, which details these requirements.
Could you please advise on how we can obtain this specific SSL certificate public key information and the outgoing static IP address(es)/ranges for our Shopify store? We need to provide this to HP to finalize our API access.
Hey @Mabior_Manyok - at the moment we don’t provide IP lists for whitelisting. There is a bit more information on why here, but our system is set up so that the IPs are dynamic and can change.
Generally, we are also unable to share SSL certificate details, but there’s a bit more info on how to get public info on your TSL/SSL certificate here as well.
That said, if you’re looking at connecting your shop’s data via our APIs to HP (and vice versa), the method I’d recommend would be using a middleware server that would intake the product listings (for example using our GraphQL API).
This would technically allow you to set up a server for your API connector app with a static IP, and access to your SSL/TSL certificate details. Basically, it could act as a “go-between” Shopify’s services and HP’s API rather than having HP connect directly to Shopify while allowing you access to the details needed by HP.
I know a lot of folks who make use of ERPs/CRMs do have to use middleware for similar reasons, so this is a fairly common request that our partner developers look at. A good resouce might be reaching out to them here to see if they’d be able to investigate the best path forward if you’re not already working with a dev team: https://www.shopify.com/ca/partners/find-a-partner
Hope this helps a bit, let me know if I can clarify anything on my end here!
No worries @Mabior_Manyok, my pleasure - if you do end up setting up a custom application for this, feel free to ping me in this thread and I can help out as best I can on the Shopify side of things!
- at the moment we don’t provide IP lists for whitelisting. There is a bit more information on 