From 98761b40ebe80497e212ac2d49328736164a245a Mon Sep 17 00:00:00 2001
From: ranbel <101146722+ranbel@users.noreply.github.com>
Date: Thu, 6 Nov 2025 16:58:36 -0500
Subject: [PATCH] Update mutual-tls-authentication.mdx
---
.../service-credentials/mutual-tls-authentication.mdx | 9 ++-------
1 file changed, 2 insertions(+), 7 deletions(-)
diff --git a/src/content/docs/cloudflare-one/access-controls/service-credentials/mutual-tls-authentication.mdx b/src/content/docs/cloudflare-one/access-controls/service-credentials/mutual-tls-authentication.mdx
index f310d3e02bb9ee0..d786c9fb410b453 100644
--- a/src/content/docs/cloudflare-one/access-controls/service-credentials/mutual-tls-authentication.mdx
+++ b/src/content/docs/cloudflare-one/access-controls/service-credentials/mutual-tls-authentication.mdx
@@ -7,10 +7,6 @@ sidebar:
import { AvailableNotifications, Render, Example } from "~/components";
-:::note
-Only available on Enterprise plans.
-:::
-
[Mutual TLS (mTLS) authentication](https://www.cloudflare.com/learning/access-management/what-is-mutual-tls/) ensures that traffic is both secure and trusted in both directions between a client and server. It allows requests that do not log in with an identity provider (like IoT devices) to demonstrate that they can reach a given resource. Client certificate authentication is also a second layer of security for team members who both log in with an identity provider (IdP) and present a valid client certificate.
With a root certificate authority (CA) in place, Access only allows requests from devices with a corresponding client certificate. When a request reaches the application, Access responds with a request for the client to present a certificate. If the device fails to present the certificate, the request is not allowed to proceed. If the client does have a certificate, Access completes a key exchange to verify.
@@ -365,13 +361,12 @@ mTLS does not currently work for:
- Cloudflare Pages site served on a [custom domain](/pages/configuration/custom-domains/)
- Cloudflare R2 public bucket served on a [custom domain](/r2/buckets/public-buckets/#connect-a-bucket-to-a-custom-domain)
-## Set up alerts for mutual TLS certificates
+## Notifications for mutual TLS certificates
-You can configure alerts to receive notifications before your mutual TLS certificates expire.
+Cloudflare will send the following [notifications](/notifications/) before your mutual TLS certificates expire:
-