> For the complete documentation index, see [llms.txt](https://docs-launchpad.energyweb.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs-launchpad.energyweb.org/energy-solutions/digital-spine-by-energy-web/component-guides/ddhub-client-gateway/deployment-guide/post-deployment/configure-mtls.md).

# Configure mTLS

mTLS is required in establishing a connection with EWF-hosted Digital Spine Message Broker. An error like below may be encountered when accessing the DDHub Client GW.

<figure><img src="/files/zqYTnTFAC0wMKLQNqOnI" alt=""><figcaption></figcaption></figure>

The mTLS certificate needs to be requested from EWF. Ideally, the participant will provide a CSR file then EWF creates the client certificate.

Once the certificate is obtained, confirm that your outbound IP is whitelisted by EWF.

Then, configure the certificate using the endpoint '/api/v2/certificate' on the `http://localhost:3009/docs` page.

('caCertificate' is not needed when the other 2 fields are provided), a status 201/200 will be returned.

<figure><img src="/files/MyIimoKhkrbEZZohAMWX" alt=""><figcaption></figcaption></figure>