- Property Manager name: Post Quantum Cryptography (PQC) Client to Edge
- Behavior version: The
v2026-06-09rule format supports thepqcClientToEdgebehavior v1.0. - Rule format status: Deprecated, outdated rule format
- Access: Read/Write
- Allowed in includes: Yes
Use this behavior to manage Post Quantum Cryptography key exchanges from Client to Edge.
PQC is enabled by default for Enhanced TLS hostnames. To disable PQC for Enhanced TLS, set the behavior to enabled=false. It's recommended to leave PQC enabled to secure client-to-edge communication, protect your data, and address privacy and security goals.
PQC is in limited availability and disabled by default for Standard TLS. To enable PQC for Standard TLS, set the behavior to enabled=true.
To use pqcClientToEdge, your certificate needs to have transport layer security (TLS) 1.3 enabled in its deployment settings, and the X25519MLKEM768 key group specified during the TLS handshake.
| Option | Type | Description | Requires | |
|---|---|---|---|---|
enabled | boolean | Enables Post Quantum Cryptography (PQC) key exchanges. | {"displayType":"boolean","tag":"input","type":"checkbox"} |
