# Authentication using only certificate

**URL:** <https://community.solace.com/t/authentication-using-only-certificate/1093>\
**Category:** Connectors & Integrations\
**Tags:** configuration, security\
**Created:** [January 6, 2022, 1:22am UTC](https://community.solace.com/t/authentication-using-only-certificate/1093 "2022-01-06T01:22:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wenhede](https://avatars.discourse-cdn.com/v4/letter/w/7feea3/32.png) [@wenhede](https://community.solace.com/u/wenhede)\
**Post date:** [January 6, 2022, 1:22am UTC](https://community.solace.com/t/authentication-using-only-certificate/1093/1 "2022-01-06T01:22:15Z")

</div>

Hi All,

Is it possible to authenticate using only certificate? without clientUsername and clientPassword, i tested below setup but got 401 authentication error. Any help is appreciated, thank you.

```auto
solace:
  java:
    host: tcps://192.168.133.64:55443
    msgVpn: default
    connectRetries: -1
    reconnectRetries: -1
    apiProperties:
       SSL_VALIDATE_CERTIFICATE: true
       SSL_TRUST_STORE:
       SSL_TRUST_STORE_PASSWORD:

```

---

<div class="post-metadata">

**Author:** ![amackenzie](https://yyz1.discourse-cdn.com/solace/user_avatar/community.solace.com/amackenzie/32/1168_2.png) [@amackenzie](https://community.solace.com/u/amackenzie)\
**Post date:** [January 6, 2022, 3:03am UTC](https://community.solace.com/t/authentication-using-only-certificate/1093/2 "2022-01-06T03:03:54Z")

</div>

Have you set up client certificate authentication on the broker message vpn?

> **[Sorry, it looks like we sent you the wrong way.Let us guide you back.](https://docs.solace.com/Not-Found.htm)**

Are you using a self-managed broker or a PubSub+ Cloud instance?

---

<div class="post-metadata">

**Author:** ![Ragnar](https://yyz1.discourse-cdn.com/solace/user_avatar/community.solace.com/ragnar/32/180_2.png) [@Ragnar](https://community.solace.com/u/Ragnar)\
**Post date:** [January 6, 2022, 2:14pm UTC](https://community.solace.com/t/authentication-using-only-certificate/1093/3 "2022-01-06T14:14:19Z")

</div>

You have configured the trust-store so that the API will validate the broker certificate.

You also need to set the AUTHENTICATION\_SCHEME to AUTHENTICATION\_SCHEME\_CLIENT\_CERTIFICATE and provide a key-store (SSL\_KEY\_STORE) that contains you client-certificate.