type: integer\r
     description: secure port on Kubernetes host where datafile API will be exposed\r
     default: 30224\r
+  secureEnableCert:\r
+    type: boolean\r
+    description: enable certificate base connection with PNF and DMaap\r
+    default: false\r
 node_templates:\r
   datafile-collector:\r
     interfaces:\r
         dmaap.ftp.ftpesConfiguration.keyPassword: "secret"\r
         dmaap.ftp.ftpesConfiguration.trustedCA: "/config/cacerts"\r
         dmaap.ftp.ftpesConfiguration.trustedCAPassword: "secret"\r
+        dmaap.security.trustStorePath: "/opt/app/datafile/etc/cert/trust.jks"\r
+        dmaap.security.trustStorePasswordPath: "/opt/app/datafile/etc/cert/trust.pass"\r
+        dmaap.security.keyStorePath: "/opt/app/datafile/etc/cert/key.p12"\r
+        dmaap.security.keyStorePasswordPath: "/opt/app/datafile/etc/cert/key.pass"\r
+        dmaap.security.enableDmaapCertAuth: { get_input: secureEnableCert }\r
       docker_config:\r
         healthcheck:\r
           endpoint: /heartbeat\r
       dns_name: 'dcae-datafile-collector'\r
       log_info:\r
         log_directory: "/opt/app/datafile/logs"\r
+      tls_info:\r
+        cert_directory: '/opt/app/datafile/etc/cert/'\r
+        use_tls: true\r
     type: dcae.nodes.ContainerizedPlatformComponent\r