TLS Client Certificate

• Config File Key: tls_client_cert and tls_client_key or tls_client_cert_file and tls_client_key_file
• Type: base64 encoded string or relative file location
• Optional

If specified, Pomerium will present this client certificate to upstream services when requested to enforce mutual authentication (mTLS).

For more details, see our mTLS example repository and the Upstream mTLS With Pomerium guide.