diff --git a/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md b/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md
index c14b647f08..67ee0d7cb2 100644
--- a/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md
+++ b/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md
@@ -120,7 +120,7 @@ curl --request <METHOD> --url https://<hostname-or-IP-address>:9443/<API-version
 
 ## Authenticate database connections
 
-To connect to a database with certificate-based authentication, you must provide a client certificate, signed by the trusted CA `mtls_trusted_ca`, and a private key.
+To connect to a database with certificate-based authentication, you must provide a client certificate, signed by a trusted CA, and a private key. The client certificate must either be one you previously added to the database to [enable mutual TLS]({{<relref "/operate/rs/7.22/security/encryption/tls/enable-tls#enable-mutual-tls">}}) (`authentication_ssl_client_certs` in the REST API), or be signed by one of these certificates.
 
 The following example shows how to connect to a Redis database with [`redis-cli`]({{<relref "/operate/rs/7.22/references/cli-utilities/redis-cli">}}):
 
diff --git a/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md b/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md
index 7fbb751ad9..2710fb0ddc 100644
--- a/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md
+++ b/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md
@@ -104,7 +104,7 @@ curl --request <METHOD> --url https://<hostname-or-IP-address>:9443/<API-version
 
 ## Authenticate database connections
 
-To connect to a database with certificate-based authentication, you must provide a client certificate, signed by the trusted CA `mtls_trusted_ca`, and a private key.
+To connect to a database with certificate-based authentication, you must provide a client certificate, signed by a trusted CA, and a private key. The client certificate must either be one you previously added to the database to [enable mutual TLS]({{<relref "/operate/rs/7.8/security/encryption/tls/enable-tls#enable-mutual-tls">}}) (`authentication_ssl_client_certs` in the REST API), or be signed by one of these certificates.
 
 The following example shows how to connect to a Redis database with [`redis-cli`]({{<relref "/operate/rs/7.8/references/cli-utilities/redis-cli">}}):
 
diff --git a/content/operate/rs/security/certificates/certificate-based-authentication.md b/content/operate/rs/security/certificates/certificate-based-authentication.md
index ba8ee930de..ba6aa7b27b 100644
--- a/content/operate/rs/security/certificates/certificate-based-authentication.md
+++ b/content/operate/rs/security/certificates/certificate-based-authentication.md
@@ -200,7 +200,7 @@ To set up certificate-based authentication for databases:
 
 ### Authenticate database connections
 
-To connect to a database with certificate-based authentication, you must provide a client certificate, signed by the trusted CA `mtls_trusted_ca`, and a private key.
+To connect to a database with certificate-based authentication, you must provide a client certificate, signed by a trusted CA, and a private key. The client certificate must either be one you previously added to the database to [enable mutual TLS]({{<relref "/operate/rs/security/encryption/tls/enable-tls#enable-mutual-tls">}}) (`authentication_ssl_client_certs` in the REST API), or be signed by one of these certificates.
 
 The following example shows how to connect to a Redis database with [`redis-cli`]({{<relref "/operate/rs/references/cli-utilities/redis-cli">}}):
 
@@ -210,4 +210,4 @@ redis-cli -h <hostname-or-IP-address> -p <port> --tls --cacert <redis_cert>.pem
 
 ## Limitations
 
-- Certificate-based authentication is not implemented for the Cluster Manager UI.
\ No newline at end of file
+- Certificate-based authentication is not implemented for the Cluster Manager UI.