# Unable to register pmm-client with pmm-server

**URL:** <https://forums.percona.com/t/unable-to-register-pmm-client-with-pmm-server/15896>\
**Category:** Uncategorized\
**Tags:** pmm, percona\
**Created:** [May 30, 2022, 6:05pm UTC](https://forums.percona.com/t/unable-to-register-pmm-client-with-pmm-server/15896 "2022-05-30T18:05:09Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sanjana\_Chandrasheka](https://avatars.discourse-cdn.com/v4/letter/s/34f0e0/32.png) [@Sanjana\_Chandrasheka](https://forums.percona.com/u/Sanjana_Chandrasheka)\
**Post date:** [May 30, 2022, 6:05pm UTC](https://forums.percona.com/t/unable-to-register-pmm-client-with-pmm-server/15896/1 "2022-05-30T18:05:09Z")

</div>

Hello everyone,

I have been able to successfully register my client to server using  
_pmm-admin config --server-insecure-tls --server-url=[https://admin:admin@X.X.X.X:443](https://admin:admin@X.X.X.X:443)_

But as I was reading the doc , I was exploring different ways in which I can make an ssl connection between pmm-client and pmm-server,  
so i found this particular command : pmm-admin config --server-url=[https://admin:admin@10.57.58.215](https://admin:admin@10.57.58.215)  
But I am getting the following error,  
Failed to register pmm-agent on PMM Server: Post “[https://10.57.58.215:443/v1/management/Node/Register](https://10.57.58.215:443/v1/management/Node/Register)”: x509: cannot validate certificate for 10.57.58.215 because it doesn’t contain any IP SANs.

I want to establish an ssl connection between my client and server , how can do that?

---

<div class="post-metadata">

**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\
**Post date:** [May 31, 2022, 1:01pm UTC](https://forums.percona.com/t/unable-to-register-pmm-client-with-pmm-server/15896/2 "2022-05-31T13:01:51Z")

</div>

The default SSL certificate is self-signed which requires you to use the `--server-insecure-tls` flag. You can use your own SSL certificates, signed by a 3rd party (LetsEncrypt for example) which does not need the insecure flag. Check [Database Performance Blog – Percona](http://percona.com/blog) for a HOWTO on this.

---

<div class="post-metadata">

**Author:** ![Sanjana\_Chandrasheka](https://avatars.discourse-cdn.com/v4/letter/s/34f0e0/32.png) [@Sanjana\_Chandrasheka](https://forums.percona.com/u/Sanjana_Chandrasheka)\
**Post date:** [May 31, 2022, 1:28pm UTC](https://forums.percona.com/t/unable-to-register-pmm-client-with-pmm-server/15896/3 "2022-05-31T13:28:13Z")

</div>

Thanks for the information.  
So if I use `--server-insecure-tls` for connecting my pmm-client with pmm-server it means that I am using the default ssl certs present in _/srv/nginx_ inside my docker right ?  
Either ways (using default certificate or generating my own) the connection between pmm-client and pmm-server will be ssl , is my understanding correct ?

---

<div class="post-metadata">

**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\
**Post date:** [May 31, 2022, 1:57pm UTC](https://forums.percona.com/t/unable-to-register-pmm-client-with-pmm-server/15896/4 "2022-05-31T13:57:14Z")

</div>

> [@Sanjana\_Chandrasheka](#):
>
> Either ways (using default certificate or generating my own) the connection between pmm-client and pmm-server will be ssl

Yes, that is correct.

---

<div class="post-metadata">

**Author:** ![Sanjana\_Chandrasheka](https://avatars.discourse-cdn.com/v4/letter/s/34f0e0/32.png) [@Sanjana\_Chandrasheka](https://forums.percona.com/u/Sanjana_Chandrasheka)\
**Post date:** [May 31, 2022, 2:05pm UTC](https://forums.percona.com/t/unable-to-register-pmm-client-with-pmm-server/15896/5 "2022-05-31T14:05:06Z")

</div>

okay, thank you @matthewb
