# TLS handshake error on PCF

**URL:** <https://community.dynatrace.com/t/tls-handshake-error-on-pcf/37404>\
**Category:** Container platforms\
**Tags:** cloud-foundry\
**Created:** [November 22, 2022, 6:22am UTC](https://community.dynatrace.com/t/tls-handshake-error-on-pcf/37404 "2022-11-22T06:22:47Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![KVZ](https://avatars.discourse-cdn.com/v4/letter/k/3ec8ea/32.png) [@KVZ](https://community.dynatrace.com/u/KVZ)\
**Post date:** [November 22, 2022, 6:22am UTC](https://community.dynatrace.com/t/tls-handshake-error-on-pcf/37404/1 "2022-11-22T06:22:47Z")

</div>

We’re getting a TLS handshake error on our Cloud Foundry.

In the documentation I see that there’s this option:

“If you haven’t installed a trusted certificate to your ActiveGate, make sure to clear the **Require valid certificates for communication with the API server (recommended)** checkbox.”

However, it is unclear where I can find this checkbox. I was not able to locate it.

---

<div class="post-metadata">

**Author:** ![MaciejNeumann](https://avatars.discourse-cdn.com/v4/letter/m/5e9695/32.png) [@MaciejNeumann](https://community.dynatrace.com/u/MaciejNeumann)\
**Post date:** [December 12, 2022, 9:18am UTC](https://community.dynatrace.com/t/tls-handshake-error-on-pcf/37404/2 "2022-12-12T09:18:11Z")

</div>

Hello&nbsp;[@KVZ](https://community.dynatrace.com/user/50988)&nbsp;,

You can find this checkbox when you select “Connect manually” in the Kubernetes section of the menu. Then, you’ll see the “Require valid certificates for communication with the API server (recommended)” checkbox right under the “ActiveGate Group” dropdown menu.

 ![Opera Snapshot_2022-12-12_101038_etu38336.live.dynatrace.com.png](https://global.discourse-cdn.com/dynatrace/original/3X/5/3/535d2409cf1eaa9e6a9a4b9361f3018996e8aec3.png)

 ![Opera Snapshot_2022-12-12_101013_etu38336.live.dynatrace.com.png](https://global.discourse-cdn.com/dynatrace/original/2X/3/3d0ecf1b8a51e0024fff3c0ee40d54bce3669e1b.png)

---

<div class="post-metadata">

**Author:** ![brayden\_neale](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/brayden_neale/32/24523_2.png) [@brayden\_neale](https://community.dynatrace.com/u/brayden_neale)\
**Post date:** [September 17, 2025, 11:54pm UTC](https://community.dynatrace.com/t/tls-handshake-error-on-pcf/37404/3 "2025-09-17T23:54:53Z")

</div>

Hi&nbsp;[@MaciejNeumann](https://community.dynatrace.com/user/6)

What about for Cloud Foundry?

The Dynatrace CF docs mention the same as your answer:&nbsp;[Connect your Cloud Foundry foundations with Dynatrace — Dynatrace Docs](https://docs.dynatrace.com/docs/shortlink/cloud-foundry-foundations#disable-certificate-validation)

But the configuration is a different UI and endpoint.  
Settings → Cloud and Virtualization → Cloud foundry  
And not through k8s at:  
Kubernetes → Connect Manually

 ![brayden_neale_0-1758153286967.png](https://global.discourse-cdn.com/dynatrace/original/3X/c/6/c66877a8a1e63d34eb5a910c7220d3b9a8675fca.png)

---

<div class="post-metadata">

**Author:** ![mgotaquestion](https://avatars.discourse-cdn.com/v4/letter/m/8dc957/32.png) [@mgotaquestion](https://community.dynatrace.com/u/mgotaquestion)\
**Post date:** [December 2, 2025, 4:06pm UTC](https://community.dynatrace.com/t/tls-handshake-error-on-pcf/37404/4 "2025-12-02T16:06:31Z")

</div>

Any luck finding a solution? I have the same message and I am also configuring directly in the Cloud Foundry.

---

<div class="post-metadata">

**Author:** ![brayden\_neale](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/brayden_neale/32/24523_2.png) [@brayden\_neale](https://community.dynatrace.com/u/brayden_neale)\
**Post date:** [February 23, 2026, 10:50am UTC](https://community.dynatrace.com/t/tls-handshake-error-on-pcf/37404/5 "2026-02-23T10:50:58Z")

</div>

Hi,

No luck in the current version, but I’m updating this ActiveGate integration to be a Dynatrace Extension and have included the option to disable SSL verification. This should be released to the Hub within about a month.

 ![cf_config.png](https://global.discourse-cdn.com/dynatrace/original/3X/0/d/0de7cfef903c28db38e89f0ea083eb8c95965514.png)
