how to enable mTLS between source and destination?

Hi,

As per Apigee documentation, we can enable mTLS between many sources and destinations like management server and router(8081). But how to perform the same is not given. I have tried searching for it but couldn't understand it clearly.

Thanks

Aayushi

Solved Solved
0 7 426
1 ACCEPTED SOLUTION

Not applicable

To enable mtls between Apigee and backend, you need to add root, intermediate and server certificate to Apigee truststore. And also need to share Apigee's client certificate with the server team, they will add that to their truststore.

You need to create reference for truststore and keystore as well.

Now you can use Target server management api call to configure Apigee keystore reference, truststore reference and alias with the load balancer backend.

Else you can use the configuration in the target endpoint configuration as well inside the proxy.

View solution in original post

7 REPLIES 7

Not applicable

To enable mtls between Apigee and backend, you need to add root, intermediate and server certificate to Apigee truststore. And also need to share Apigee's client certificate with the server team, they will add that to their truststore.

You need to create reference for truststore and keystore as well.

Now you can use Target server management api call to configure Apigee keystore reference, truststore reference and alias with the load balancer backend.

Else you can use the configuration in the target endpoint configuration as well inside the proxy.

Thank you @Priyadarshi Ajitav Jena

@Priyadarshi Ajitav Jena enabling mTLS between any of the components from the below architecture will remain the same?

for inter components TLS you need to install mTLS. its a separate process.

Can you please suggest to me any document or link for these steps? @Priyadarshi Ajitav Jena

Thanks alot.