> For the complete documentation index, see [llms.txt](https://docs.collibra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.collibra.com/data-quality-self-hosted/connections/authentication/connect-to-a-google-cloud-sql-instance.md).

# Connect to a Google Cloud SQL Instance

This section shows you how to connect Collibra DQ to a Google Cloud (GCP) SQL instance with SSL enabled.

## Steps

{% stepper %}
{% step %}
Create a new client certificate from CloudSQL.
{% endstep %}

{% step %}
Download the `client-cert.pem`, `client-key.pem`, `server-ca.pem` files from the Google Cloud Console to a deployment directory such as `/opt/owl/certs/`.
{% endstep %}

{% step %}
In that directory, run the following command:

```
openssl pkcs8 -topk8 -inform PEM -outform DER -in client-key.pem -out client-key.pk8  -nocrypt
```

{% hint style="info" %}
This command should not require a password.
{% endhint %}
{% endstep %}

{% step %}
In `owl.properties` and `owl-env.sh`, change your JDBC URL to the following:

```
jdbc:postgresql://$HOST:5432/postgres?sslcert=/opt/owl/certs/client-cert.pem&sslkey=/opt/owl/certs/client-key.pk8&sslrootcert=/opt/owl/certs/server-ca.pem
```

{% endstep %}
{% endstepper %}