> ## Documentation Index
> Fetch the complete documentation index at: https://siderolabs-fe86397c-1-11-reference.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Custom Certificate Authorities

> How to supply custom certificate authorities

## Appending the Certificate Authority (CA)

Append additional certificate authorities to the system's trusted certificate store by [patching](../configure-your-talos-cluster/system-configuration/patching) the machine configuration with the following
[document](../reference/configuration/security/trustedrootsconfig):

```yaml
apiVersion: v1alpha1
kind: TrustedRootsConfig
name: custom-ca
certificates: |-
    -----BEGIN CERTIFICATE-----
    ...
    -----END CERTIFICATE-----
```

Multiple documents can be appended, and multiple CA certificates might be present in each configuration document.

This configuration can be also applied in maintenance mode.

Please note that if the `STATE` partition is encrypted, the CA certificates will be only be loaded after the partition is unlocked.
So the encryption method should allow unlocking the partition without the need for a CA certificate.