You can upload different keys, transport layer security (TLS) certificates, and certificate chains to Tanzu Service Mesh for different scenarios where secure, encrypted communication needs to be established for services in your service mesh.
You need to upload certificates in different situations where secure, encrypted connections need to be made to services in your service mesh, such as when public services are used.
You need to upload certificate chains in scenarios where you want Tanzu Service Mesh to integrate with an external service that uses self-signed certificates, such as when integration with with an external certificate authority (CA) service is needed.
For instructions on adding TLS certificates and certificate chains to Tanzu Service Mesh, click the following links.