<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Mutual TLS (mTLS)</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/76261/mutual-tls-mtls</link><description>I would like to do mutal TLS on a NRF9160. I found the https sample where the firmware does server authentication. How do I add client side authentication to this example so that I get mTLS? Did I miss a sample that already shows this? 
 
 Best regards</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Fri, 11 Jun 2021 14:30:39 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/76261/mutual-tls-mtls" /><item><title>RE: Mutual TLS (mTLS)</title><link>https://devzone.nordicsemi.com/thread/314947?ContentTypeID=1</link><pubDate>Fri, 11 Jun 2021 14:30:39 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:f486155b-c13e-46eb-9281-f2821edc4504</guid><dc:creator>H&amp;#229;kon Alseth</dc:creator><description>&lt;p&gt;Hi,&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Mutual TLS, as described on AWS atleast (&lt;a href="https://aws.amazon.com/blogs/compute/introducing-mutual-tls-authentication-for-amazon-api-gateway/"&gt;https://aws.amazon.com/blogs/compute/introducing-mutual-tls-authentication-for-amazon-api-gateway/&lt;/a&gt;), looks to be a verification of the client, similar to what the client does when verifying the domain.&lt;/p&gt;
[quote user=""]Did I miss a sample that already shows this?[/quote]
&lt;p&gt;No, there&amp;#39;s no sample for this specifically on HTTPS. If you look at the mqtt cloud samples, you will see client and server verification.&lt;/p&gt;
&lt;p&gt;You input the ca root and client keypair to the modem via modem_key_mgmt_write():&lt;/p&gt;
&lt;p&gt;&lt;a href="https://github.com/nrfconnect/sdk-nrf/blob/v1.5.1/subsys/net/lib/nrf_cloud/src/nrf_cloud_transport.c#L419-L449"&gt;https://github.com/nrfconnect/sdk-nrf/blob/v1.5.1/subsys/net/lib/nrf_cloud/src/nrf_cloud_transport.c#L419-L449&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Kind regards,&lt;/p&gt;
&lt;p&gt;Håkon&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>