> ## Documentation Index > Fetch the complete documentation index at: https://docs.domino.ai/llms.txt > Use this file to discover all available pages before exploring further. # Work with custom certificates You can configure Domino to connect to services that use custom certificates that are external to the Domino cluster. In addition to public services like AWS S3, you might want to use private services in your security domain that are secured with custom certificates or a custom certificate authority. The following are examples of private services: * Docker registry * Git server * S3 service * LDAPs * OIDC * Data sources Domino recommends that you add certificates for private services to the installation configuration file (`domino.yml`) as described in this topic. This ensures that Domino propagates the certificates throughout the system and maintains them, even when you upgrade Domino. If you add custom certificates to `etc/ssl/certs` in a [compute environment](/cloud/platform-capabilities/core-concepts/compute-environments/manage-compute-environments), the system overwrites them at runtime. If you cannot use Domino’s recommended method or must configure the certificates for a specific compute environment, see [Configure Certificates for A Specific Compute Environment](https://tickets.dominodatalab.com/hc/en-us/articles/6665122897428-Configure-Certificates-for-A-Specific-Compute-Environment). The topics in this section explain how to work with custom certificates: * [Domino-custom-certificates ConfigMap.](/cloud/admin/security-and-compliance/custom-certificates/domino-custom-cert-configmap) * [Add the PEM bundle to the ConfigMap.](/cloud/admin/security-and-compliance/custom-certificates/add-pem-bundle) * [Update the ConfigMap.](/cloud/admin/security-and-compliance/custom-certificates/update-configmap) * [Apply custom certificates.](/cloud/admin/security-and-compliance/custom-certificates/apply-custom-certs) * [Upgrade Domino.](/cloud/admin/security-and-compliance/custom-certificates/upgrade-domino)