API Documentation
English

On this page

Create an mTLS Certificate

Overview

mTLS (Mutual TLS) certificates are used to authenticate to GlobalSign's APIs. It's a regular x.509 client certificate enabled for client authentication and serves as a second factor in authenticating against our APIs. The mTLS certificate is free of charge. We recommend creating a new key pair when using the production mTLS service, even if you have an existing one from a trial account.

Prerequisites 

In order to create an mTLS certificate, you will need to ensure you have: 

 

Launch Interactive Demo

Guidelines

  1. Log in to your Atlas↗ account. 

  2. From the dashboard, click the Credentials dropdown to expand.

    api-creds-article1.png

  3. Select mTLS Certificate.

    api-creds-article2.png

  4. Click on Generate an mTLS button at the upper right corner of the window.

    atlas_create_mtls2.png
  5. Select Directly via the API card, and then click Continue. 

    atlas_create_mtls3.png

  6. Select the API credential to link to the mTLS certificate, then click Continue.

    atlas_create_mtls4.png

  7. Paste the CSR into the provided field, then click Continue.

    NOTE: The CSR must be at least 2048 RSA key size. This CSR should contain a new public/private key pair. To create a CSR, please refer to this page.

    atlas_create_mtls5.png

  8. You have now created an mTLS Certificate. From this screen, you can:

    1. Copy the certificate contents into a text file and save it locally with a .cer file extension.

    2. Click Download ICA to download the issuing CA certificate, then follow this guide to install↗. 

atlas_create_mtls6.png

 

WHAT'S NEXT: After creating your mTLS Certificate, download and install↗ it on your server.