# 3.a. Generating client certificates using the CSR flow

This is an most straight-forward way of generating client certificates, but it can expose the server to unwanted connections during it's "deployment mode" phase. Please make sure you turn of the deployment mode after all client machines have successfully connected the first time.

#### Server-Side

1. Make sure the server is in Deployment-Mode

![TimeLine Server/Security](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MXf5GuikRIHooatf_sm%2Fuploads%2Fdp1fUBzFpRUnn8uGKElC%2Fimage.png?alt=media\&token=0cb21b17-9da3-4995-b48f-092c1f538158)

2\. Press "Load Configuration"

#### Client-Side

3\. Establish a connection to the server.

{% hint style="info" %}
Make sure that the proxy is enabled on the client. See steps **1** and **2**  [**Chapter 4. Setting up the E3 client connections**](setting-up-the-e3-client-connection)
{% endhint %}

![Login screen](https://2522353545-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MXf5GuikRIHooatf_sm%2Fuploads%2F73M69pxPmSBXVSwzUiXt%2Fimage.png?alt=media\&token=9308d4d0-6e99-425a-b927-9c03be85b864)

4\. Perform the login (please note that the first login will take a bit longer than subsequent ones)

{% hint style="danger" %}
**Make sure to turn the "Deployment mode" off (Inactive) on the server after all clients have successfully logged in for the first time.**
{% endhint %}
