For environments that do not have access to direct outbound internet access, you can configure your offline or air-gapped deployment to install Tanzu Kubernetes Grid and NSX Application Platform using NSX Application Platform Automation Appliance.
You can deploy the NSX Application Platform in an offline or air-gapped environment by setting up a local Harbor registry.
Workflow for Various Certificate Types
The following flowchart shows the workflow for the different types of certificates.
![Offline deployment workflow diagram](images/GUID-3CF9D51E-E5D6-4AB2-A208-0605CE6655DF-high.png)
Determine the type of certificates you plan to use and implement the applicable procedures.