# Controller - Router Authentication

**URL:** <https://openziti.discourse.group/t/controller-router-authentication/1667>\
**Category:** General Questions\
**Created:** [September 26, 2023, 8:16am UTC](https://openziti.discourse.group/t/controller-router-authentication/1667 "2023-09-26T08:16:03Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![devawasthi](https://avatars.discourse-cdn.com/v4/letter/d/41988e/32.png) [@devawasthi](https://openziti.discourse.group/u/devawasthi)\
**Post date:** [September 26, 2023, 8:16am UTC](https://openziti.discourse.group/t/controller-router-authentication/1667/1 "2023-09-26T08:16:04Z")

</div>

Hi, I wanted to know in depth as to how does an edge router authenticate itself to a controller, what certificates or keys are used and how is it presented to the controller

---

<div class="post-metadata">

**Author:** ![PhilipGriffiths](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/philipgriffiths/32/341_2.png) [@PhilipGriffiths](https://openziti.discourse.group/u/PhilipGriffiths)\
**Post date:** [September 26, 2023, 8:30am UTC](https://openziti.discourse.group/t/controller-router-authentication/1667/2 "2023-09-26T08:30:22Z")

</div>

All endpoints in the Ziti overlay, whether edge (SDKs, tunnelers) or fabric (edge routers at the edge or in the mesh), must go through the 'bootstrapping trust' process using strong identity.

This is fleshed out at length in this 5 part blog series - [Bootstrapping Trust Part 1](https://blog.openziti.io/bootstrapping-trust-part-1-encryption-everywhere). I would start there and see if you still have questions.

---

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [September 26, 2023, 12:23pm UTC](https://openziti.discourse.group/t/controller-router-authentication/1667/3 "2023-09-26T12:23:53Z")

</div>

Hi @devawasthi, welcome to the community and to OpenZiti!

I think a better resource for your question other than the blog @PhilipGriffiths shared is probably the docs at [Ziti Security | OpenZiti](https://openziti.io/docs/learn/core-concepts/security/overview)

Did you find that doc? There's "a lot" in there to read through that I think should address your question?

---

<div class="post-metadata">

**Author:** ![devawasthi](https://avatars.discourse-cdn.com/v4/letter/d/41988e/32.png) [@devawasthi](https://openziti.discourse.group/u/devawasthi)\
**Post date:** [September 28, 2023, 9:32am UTC](https://openziti.discourse.group/t/controller-router-authentication/1667/4 "2023-09-28T09:32:20Z")

</div>

Yes, It was helpful to me, thank you !