# Securing connections to cnMaestro with MTLS

**URL:** https://community.cambiumnetworks.com/t/securing-connections-to-cnmaestro-with-mtls/109108
**Category:** cnMaestro
**Created:** [October 16, 2026, 2:33pm UTC](https://community.cambiumnetworks.com/t/securing-connections-to-cnmaestro-with-mtls/109108 "2026-10-16T14:33:46Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Mitchell\_Mitchell](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/m/e0b2c6/32.png) [@Mitchell\_Mitchell](https://community.cambiumnetworks.com/u/Mitchell_Mitchell)
#### Post date: [October 16, 2026, 2:33pm UTC](https://community.cambiumnetworks.com/t/securing-connections-to-cnmaestro-with-mtls/109108/1 "2026-10-16T14:33:46Z")

</div>

Cross posting in the cnMaestro category hopefully to get more views.

I’m curious if anyone has done this, or if this is even supported. I have a mix of X7, XE, and XV access points and they are installed at remote, dissimilar, somewhat unmanaged locations. Does anyone know if it is possible to install a certificate on the APs and have the APs utilize MTLS for their connection to on-prem cnMaestro? I’m looking at front-ending an internet-facing on-prem instance of cnMaestro with cloudflare and have clouldflare police the connections from the remote APs by validating the MTLS cert. If the remote connections can’t present a valid cert cloudflare won’t allow the connection to pass on to cnMaestro. This would not require any changes to the on-prem instance of cnMaestro as the validation (firewalling if you will) would take place at cloudflare.