# Manage the TLS certificate using the GUI

Once the system installation is completed, the cluster TLS certificate is enabled with an auto-generated self-signed certificate to access the GUI, CLI, and API through HTTPS. If you have a custom TLS certificate, you can set it instead of the auto-generated self-signed certificate.

You can also download the existing TLS certificate for later use if you want to use the self-signed certificate.

![TLS Certificate](https://661826007-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuOB5D2WMRjXBnChPFTrk%2Fuploads%2FgjgBj6M2Ji9shrUpv42v%2Fwmng_tls_certificate.png?alt=media\&token=9137762e-31e8-46d7-850b-dad1a3de7ac0)

**Procedure**

1. From the menu, select **Configure > Cluster Settings**.
2. From the left pane, select **Security**.
3. In the TLS Certificate section, select **Set TLS certificate**.
4. In the Set Custom TLS Certificate dialog, do one of the following:
   * Select **Upload TLS certificate files**, and upload the TLS certificate and private key files.
   * Select **Paste the custom certificate content**, and paste the content of the TLS certificate and private key.

![Set Custom TLS Certificate](https://661826007-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuOB5D2WMRjXBnChPFTrk%2Fuploads%2F8dY2Y4dApE2mQ6FaAX8t%2Fwmng_set_custome_tls_certificate.png?alt=media\&token=b596d076-dd77-439b-b454-de618c704d4e)

5\. To download the existing TLS certificate, select **Download TLS certificate**. \
     In the dialog, set a name for the certificate and select **Download**.

![Download a TLS certificate](https://661826007-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FuOB5D2WMRjXBnChPFTrk%2Fuploads%2FE68BQUJoPGAR2qUHEibR%2Fwmng_download_tls_certificate.png?alt=media\&token=bd7e6902-ec52-4a4f-8c2b-0cf940090f4a)