# Obtaining a Cluster Certificate

#### Scenario

Before accessing cluster resources through open-source Kubernetes APIs, obtain the cluster's certificate.

#### Procedure

1. Log in to the CCE console. In the navigation pane, choose Resource Management > Clusters.
2. In the card view of the target cluster, choose More > Download X.509 Certificate.
3. In the Download X.509 Certificate dialog box displayed, select the certificate expiration time and download the X.509 certificate of the cluster as prompted.

   Figure 1 Downloading a certificate
   - The downloaded certificate contains three files: client.key, client.crt, and ca.crt. Keep these files secure.
   - Certificates are not required for mutual access between containers in a cluster.

Parent topic: Clusters