[id='configuring-encryption']
:context: endpoint-security
= Configuring TLS/SSL encryption

You can secure {brandname} Server connections using SSL/TLS encryption by configuring a keystore that contains public and private keys for {brandname}.
You can also configure client certificate authentication if you require mutual TLS.

include::{topics}/proc_configuring_server_keystores.adoc[leveloffset=+1]
include::{topics}/proc_server_generating_keystores.adoc[leveloffset=+2]
include::{topics}/proc_server_configuring_ssl_engine.adoc[leveloffset=+2]
include::{topics}/proc_configuring_server_fips.adoc[leveloffset=+1]
include::{topics}/proc_configuring_client_cert_authn.adoc[leveloffset=+1]
include::{topics}/proc_configuring_client_cert_authz.adoc[leveloffset=+1]

// Restore the parent context.
ifdef::parent-context[:context: {parent-context}]
ifndef::parent-context[:!context:]
