> For the complete documentation index, see [llms.txt](https://docs-launchpad.energyweb.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs-launchpad.energyweb.org/energy-solutions/digital-spine-by-energy-web/component-guides/ddhub-client-gateway/deployment-guide/post-deployment/configure-mtls.md).

# Configure mTLS

mTLS is required in establishing a connection with EWF-hosted Digital Spine Message Broker. An error like below may be encountered when accessing the DDHub Client GW.

<figure><img src="https://4257445316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fnf3YeoQlQerc93GsC2Me%2Fuploads%2F2JXw1cxiRcYTJYqdMyWF%2Fimage.png?alt=media&amp;token=787551ca-8e36-47cd-a18d-5119c0f1360c" alt=""><figcaption></figcaption></figure>

The mTLS certificate needs to be requested from EWF. Ideally, the participant will provide a CSR file then EWF creates the client certificate.

Once the certificate is obtained, confirm that your outbound IP is whitelisted by EWF.

Then, configure the certificate using the endpoint '/api/v2/certificate' on the `http://localhost:3009/docs` page.

('caCertificate' is not needed when the other 2 fields are provided), a status 201/200 will be returned.

<figure><img src="https://4257445316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fnf3YeoQlQerc93GsC2Me%2Fuploads%2FZxFeatYsBnLyXft9mclj%2Fimage.png?alt=media&amp;token=e5f5078f-9958-4130-8127-089e3bb6fa22" alt=""><figcaption></figcaption></figure>