> For AI agents: [llms.txt](https://docs.trustedauth.com/llms.txt) provides a Markdown index of this documentation.

# Windows: Configure Device Agent for Device Verification

## Manage Allowed SSL Server Urls for certificate based client authentication

The administrator must set `[HKEY_LOCAL_MACHINE\SOFTWARE\Entrust\Bluetooth\AllowedSslServerUrls]` registry key to enable client authentication on an IDaaS environment. `AllowedSslServerUrls` is a list of URL strings separated by comma.

example

`https://tenant1.us.ssl.trustedauth.com,https://tenant2.us.ssl.trustedauth.com` is a list of URLs to enable client authentication for tenant1 with `https://tenant1.us.trustedauth.com` and tenant2 with `https://tenant2.us.trustedauth.com` as instance URL.

## Manage Allowed Server URLs for Device Verification authentication

The administrator can set the `[HKEY_LOCAL_MACHINE\SOFTWARE\Entrust\Bluetooth\IdaasUrl]` registry key to define the allowed IDaaS environment. `IdaasUrl` is a list of URL strings separated by commas. If undefined, the variable includes a default value that supports all domains `https://\*.trustedauth.com`. However, Entrust recommends defining the value to limit the number of supported instances.

example

`https://tenant1.us.trustedauth.com, https://tenant2.us.trustedauth.com` are example URLs of tenant1 and tenant2 as allowed servers.