# Certificates in eHerkenning Broker
In order to set up the connection to our eHerkenning broker successfully, you must first obtain a PKIoverheid certificate (if you have not already done so).
To purchase a certificate, you will first need to create your own Certificate Signing Request (CSR) locally. Using your own CSR, request a PKIo G1 certificate (opens new window). Once you have purchased the correct PKIo certificate, use the public part of the certificate for your metadata and service catalogue files.