← Back to glossary
🤝

Mutual TLS (mTLS)

Encryption

TLS (Transport Layer Security) Secure Connection Certificate Authority (CA) Public Key Infrastructure (PKI)

TLS configuration requiring client certificates, providing strong transport-layer mutual authentication.

Definition

mTLS requires both server and client certificates. It authenticates clients at the transport layer and can reduce reliance on bearer tokens. Operational needs include issuing, rotating, and revoking certs.

In plain English TLS configuration requiring client certificates, providing strong transport-layer mutual authentication.

Why this matters

Why it matters: Strong mutual auth reduces unauthorized access and lateral movement.

Example

Example: Issue short-lived client certs via an internal CA, automate rotation, and monitor cert usage.