# How keycloak 16.1.1 config one way tls?

**URL:** <https://forum.keycloak.org/t/how-keycloak-16-1-1-config-one-way-tls/25117>\
**Category:** Miscellanaeous\
**Tags:** authentication, ldap\
**Created:** [March 19, 2024, 4:24am UTC](https://forum.keycloak.org/t/how-keycloak-16-1-1-config-one-way-tls/25117 "2024-03-19T04:24:21Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![crisdev1313](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/crisdev1313/32/9922_2.png) [@crisdev1313](https://forum.keycloak.org/u/crisdev1313)\
**Post date:** [March 19, 2024, 4:24am UTC](https://forum.keycloak.org/t/how-keycloak-16-1-1-config-one-way-tls/25117/1 "2024-03-19T04:24:21Z")

</div>

i get the certificate using this script openssl s\_client -connect 192.68.1.13:636 -showcerts \< /dev/null

im using keycloak version 16.1.1 my question is how to configure **one way TLS** in keycloak?

here is my docker compose and my certificate file is tls.pem

```auto
services:
  identity-service:
        image: quay.io/keycloak/keycloak:16.1.1
        container_name: ad_con
        command: -c standalone.xml
        environment:
            - KEYCLOAK_USER=admin
            - KEYCLOAK_PASSWORD=admin
            - KEYCLOAK_IMPORT=/tmp/alfresco-realm.json
            - DB_VENDOR=h2	
        volumes:
            - ./cert/tls.pem:/cert/tls.pem
        
        ports:
            - 9999:8080
            - 9443:8443 
 

```