Client certificates
Use Cloudflare public key infrastructure (PKI) to create client certificates. You can use these certificates with Cloudflare API Shield™ to enforce mutual Transport Layer security (mTLS) encryption.
To use API Shield to protect your API or web application, you must do the following:
-
Use Cloudflare’s fully hosted public key infrastructure (PKI) to create a client certificate .
-
Configure your mobile app or IoT device to use your Cloudflare-issued client certificate.
-
Enable mTLS for the hosts you wish to protect with API Shield.
-
Create Cloudflare firewall rules that require API requests to present a valid client certificate .