# Documentation Clarification for Certificates in 2.0 Extensions

**URL:** <https://community.dynatrace.com/t/documentation-clarification-for-certificates-in-2-0-extensions/41930>\
**Category:** Extensions\
**Tags:** extensions\
**Created:** [October 4, 2023, 2:42pm UTC](https://community.dynatrace.com/t/documentation-clarification-for-certificates-in-2-0-extensions/41930 "2023-10-04T14:42:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sivart\_89](https://avatars.discourse-cdn.com/v4/letter/s/848f3c/32.png) [@sivart\_89](https://community.dynatrace.com/u/sivart_89)\
**Post date:** [October 4, 2023, 2:42pm UTC](https://community.dynatrace.com/t/documentation-clarification-for-certificates-in-2-0-extensions/41930/1 "2023-10-04T14:42:28Z")

</div>

I’m a little confused by the documentation below. For 2.0 extensions it states the below. To me this is saying it is needed otherwise the extension will not work, but that is not the case. I’ve created a JMX extension and added it to a bunch of hosts. I have not added the certificate but we are getting data from the extension. Can someone please clarify this?

**Each host running your extension, whether OneAgent or ActiveGate, needs to have the root certificate saved in a dedicated directory. This extra step is required to enhance the security of the Extensions 2.0 framework.**

> **[Sign extensions](https://docs.dynatrace.com/docs/ingest-from/extensions/develop-your-extensions/sign-extensions)**
>
> Learn how to sign an extension, upload certificates and custom extensions, and configure certificate permissions using the Dynatrace Extensions Framework.

---

<div class="post-metadata">

**Author:** ![Mike\_L](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/mike_l/32/11717_2.png) [@Mike\_L](https://community.dynatrace.com/u/Mike_L)\
**Post date:** [October 4, 2023, 2:47pm UTC](https://community.dynatrace.com/t/documentation-clarification-for-certificates-in-2-0-extensions/41930/2 "2023-10-04T14:47:54Z")

</div>

JMX is excluded from the certificate requirement, it just needs to exist on the Dynatrace cluster. I’ll ask for the documentation to be updated.

---

<div class="post-metadata">

**Author:** ![sivart\_89](https://avatars.discourse-cdn.com/v4/letter/s/848f3c/32.png) [@sivart\_89](https://community.dynatrace.com/u/sivart_89)\
**Post date:** [October 4, 2023, 2:49pm UTC](https://community.dynatrace.com/t/documentation-clarification-for-certificates-in-2-0-extensions/41930/3 "2023-10-04T14:49:39Z")

</div>

[@Mike\_L](https://community.dynatrace.com/user/11520)&nbsp; thank you!