====Securing the MQTT Server====

You can add username/password, SSL and client certificate security to help ensure that communication between you and the ARDI server is both private and protected.

Use the parameters **mqttuser** and **mqttpass** to specify the username/password to access the MQTT server.

Set **mqttsecure** to '1' to use TLS/SSL encryption.

Set **mqttcert** to the path of your client certificate if your MQTT server is using client authentication.

You can set these values in your [[mqttproxy:json_configuration_file|configuration file]] to make it more convenient.