# Client Authentication (mTLS) in Cli format for docker

**URL:** <https://community.traefik.io/t/client-authentication-mtls-in-cli-format-for-docker/18586>\
**Category:** Traefik v2\
**Tags:** cli, docker\
**Created:** [May 11, 2023, 9:44am UTC](https://community.traefik.io/t/client-authentication-mtls-in-cli-format-for-docker/18586 "2023-05-11T09:44:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shtaigerwald](https://avatars.discourse-cdn.com/v4/letter/s/ecae2f/32.png) [@Shtaigerwald](https://community.traefik.io/u/Shtaigerwald)\
**Post date:** [May 11, 2023, 9:44am UTC](https://community.traefik.io/t/client-authentication-mtls-in-cli-format-for-docker/18586/1 "2023-05-11T09:44:37Z")

</div>

Can I set up Client Authentication traefik in docker container/cli format?

I read [Traefik TLS Documentation - Traefik](https://doc.traefik.io/traefik/https/tls/#client-authentication-mtls) and tried to write  
`command: `  
` - --tls.options.default.clientAuth.caFiles=/certificates/clientca1.crt`  
`- --tls.options.default.clientAuth.clientAuthType=RequireAndVerifyClientCert`  
but it doesn't work.

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [May 11, 2023, 9:54am UTC](https://community.traefik.io/t/client-authentication-mtls-in-cli-format-for-docker/18586/2 "2023-05-11T09:54:54Z")

</div>

This is dynamic configuration and needs to go into a dynamic config file, which is read via `provider.file` in the static config.