---
updatedAt: 2026-05-21T09:14:56.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/installation/llms.txt
---

# TLS Certificates as a Client

Configure JFrog Platform to trust external TLS certificates for mTLS connections to LDAPS, OAuth, and proxy services.

You can set up TLS between the JFrog Platform and external services by trusting external service certificates. JFrog services do not allow an SSL/TLS connection with an external service without validating the trusted CA certificate.

For example, you may want to connect to remote repositories, your LDAPS, internal proxy, OAuth server, or other external services over HTTPS. You may need to trust a certificate (for example, a self-signed certificate) that was not signed by a trusted <a href="https://en.wikipedia.org/wiki/Certificate_authority" target="_blank">Certificate Authority</a> (CA) and is used by the external service.

<Cards columns={2}>
  <Card title="Download TLS Certificates" href="download-tls-certificates" icon="fa-solid fa-download">
    Download TLS certificates from an SSL-secured JFrog Platform server using OpenSSL commands for use in client certificate configurations.
  </Card>

  <Card title="Trust a Self-Signed Certificate or a New CA" href="trust-a-self-signed-certificate-or-a-new-ca" icon="fa-solid fa-certificate">
    Trust a new certificate by adding it to the trusted directory of every JFrog service that needs to establish a secure connection to the external service.
  </Card>
</Cards>

## Related Topics

* [Communication Between Services](communication-between-services)
* [Access as a Certificate Authority](using-access-as-a-certificate-authority)
* [Set TLS on the JFrog Platform](set-tls-on-the-jfrog-platform)
* [Configure Proxy Between JFrog Products](configure-proxy-between-jfrog-products)
* [Access YAML Configuration](access-yaml-configuration)