# CA certificates for Control Plane EE ?

**URL:** <https://forum.ansible.com/t/ca-certificates-for-control-plane-ee/38313>\
**Category:** AWX Project\
**Tags:** ee\
**Created:** [August 8, 2023, 3:02pm UTC](https://forum.ansible.com/t/ca-certificates-for-control-plane-ee/38313 "2023-08-08T15:02:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jan\_Goyvaerts](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@Jan\_Goyvaerts](https://forum.ansible.com/u/Jan_Goyvaerts)\
**Post date:** [August 8, 2023, 3:02pm UTC](https://forum.ansible.com/t/ca-certificates-for-control-plane-ee/38313/1 "2023-08-08T15:02:29Z")

</div>

Hello Community,

When synchronizing a Git project with collection dependencies, I am getting certificate errors. Which is most probably due to our firewalls decrypting the https traffic.

I have created a custom EE including these certificates. Which seem to be using the certificates because all dependencies could be downloaded without any errors.It is assigned as the default EE for the project.

However, the project synchronization job seem to use a different EE, namely ‘Control Plane Execution Environment’. Which of course is not using the CA certificates.

Problem is, this execution environment can not be altered. And neither can the firewalls of my employer 🙂

So my question is: How can the EE be configured for the project synchronization ?

THX

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [August 11, 2023, 5:14pm UTC](https://forum.ansible.com/t/ca-certificates-for-control-plane-ee/38313/2 "2023-08-11T17:14:29Z")

</div>

you can override the control plane ee by adding this to your AWX spec

control\_plane\_ee\_image: [quay.io/myusername/control\_plane\_ee:latest](http://quay.io/myusername/control_plane_ee:latest)

AWX Team