> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/web-application-and-api-protection-waap/data-collection/gateways-load-balancers/apigee/optional-apigee-agent-tls-configuration.md).

# (Optional) Apigee agent TLS configuration

You can configure TLS communication between Traceable's Apigee agent and Traceable's Platform agent. Make a note of the following points before you begin:

* Make sure that Traceable Platform agent's TLS is already set up. Configure the following in your Traceable Platform agent's `values.yaml` or `agentconfig.yaml`file (as per your deployment method) for setting up TLS:

  ```yaml
  tls_server:
    key_file: "domain.key"
    cert_file: "domain.crt"
    root_cert_file: "root_ca.crt"
  ```

  You can generate a root CA certificate by following the script documented in[ this topic](/web-application-and-api-protection-waap/installation/optional-installation-topics/generate-self-signed-certificate.md).
* Make sure that Apigee agent is set up. For more information, see [Apigee - Cloud deployment](https://docs.traceable.ai/docs/apigee-cloud-deployment).

### Steps

Complete the following steps to configure TLS in Apigee:

1. Log into your Apigee platform and navigate to Keystore settings under **Admin → Environments → TLS Keystores**.![](https://1414883571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdr7UJpJrdGkkSGT6AFTu%2Fuploads%2Fgit-blob-9b75ae5c79333227d6bafa8117e2924ab423dd7d%2Ftraceable_apigee_keystore-1tod5co.png?alt=media)
2. Click on the **+ Keystore** button as shown above to create a new Keystore.
3. Create a new alias by selecting **Certificate Only** option. Provide the `root_ca.crt` corresponding to the certificate used to set up Traceable Platform agent.![](https://1414883571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdr7UJpJrdGkkSGT6AFTu%2Fuploads%2Fgit-blob-da7e2805cb665752d9259dbe9bbc5121438c94bf%2Ftraceable_apigee_new_alias-1v92el1.png?alt=media)
4. Navigate to **Admin → Environments → References**.
5. Create a new reference that points to the Keystore that you have created.![](https://1414883571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdr7UJpJrdGkkSGT6AFTu%2Fuploads%2Fgit-blob-f8f7441cb0bc407bee6dbd7fb910167671938a94%2Ftraceable_apigee_create_reference-spkozo.png?alt=media)
6. Navigate to **Develop → SharedFlows → traceable-sharedflow**.
7. Navigate to **ExportSpansJS**and:
   1. Set `SSLEnabled` to `true`
   2. Change the Truststore element to the reference created above in `ref://<name of your reference>` format.![](https://1414883571-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdr7UJpJrdGkkSGT6AFTu%2Fuploads%2Fgit-blob-90c4645411cf6f4c8e6d847d35bbeaee310f13eb%2Ftraceable_apigee_change_reference-17jusk6.png?alt=media)
8. Update your ExportSpanJS to enable TLS and then save and deploy the new version to SharedFlow.

{% @harness-feedback/feedback %}