# TLS Communication

If you want a secured TLS connection for LDAP, TLS communication must be enabled between the OpenLDAP connector and the LDAP server. For a Java client to connect using TLS and self-signed certificates, you have to install the certificate into the JVM key-store.

> [!NOTE]
>
> SailPoint now supports and recommends secured certificate-based authentication using TLS for the OpenLDAP connector. Ensure the connection to the LDAP server uses TLS with a self-signed or CA-signed certificate.