Unlike standard TLS, which only authenticates the server, mutual TLS (mTLS) is an enhanced security protocol where both the client and the server authenticate using digital certificates. With Snyk API & Web you can configure your targets to use this type of authentication.
Prerequisites
You must have the change target settings permission, allowing you to change target settings.
You must have your client authentication certificate (.p12 or .pfix) and its corresponding certificate password.
Your account plan must include this feature.
Configure mTLS (Mutual TLS)
If your target requires a client-side certificate for authentication, you can configure mTLS in the target's authentication settings.
In Snyk API & Web, navigate to the Targets page.
Identify the target you want to configure, and click on the gear icon to access that target's settings.
In the Authentication tab, locate the CLIENT AUTHENTICATION CERTIFICATE module.
Upload your .p12 or .pfix certificate file, and enter the Certificate Password required to decrypt the file.
Save your changes.
Verify the outcome
After you save the configuration, mutual TLS authentication is enabled. The next time you run a scan against this target, Snyk API & Web automatically uses the configured mTLS certificates.
Important: For your security, all sensitive fields (like certificates and passwords) are obfuscated once saved and cannot be viewed or retrieved again.
Manage the feature
You can manage these settings at any time from your target's Authentication tab.
To temporarily disable a setting, use the Off/On toggle.
To permanently remove a configuration, use the Delete button.