You're viewing **Apigee Edge** documentation.  
[Go to the
**Apigee X** documentation](http://cloud.google.com/apigee/docs/api-platform/security/tls-vars). info

A virtual host on Edge defines the domains and ports on which an API proxy is exposed, and, by
extension, the URL that apps use to access an API proxy.

A virtual host also defines whether the API proxy is accessed by using the HTTP protocol, or
by the encrypted HTTPS protocol that uses TLS. When configuring a virtual host to use HTTPS and
TLS, you configure the virtual host to use a *keystore* and/or a *truststore*.

Because Cloud customers can only create virtual hosts that support TLS, see
[Configuring virtual hosts for the Cloud](https://docs.apigee.com/api-platform/fundamentals/configuring-virtual-hosts-cloud)
for instructions on creating a virtual host.

> [!NOTE]
> **Note:** Creating virtual hosts for Edge for the Cloud require that you enable TLS. Also, you must have a cert signed by a trusted entity, such as Symantec or VeriSign. You cannot use a self-signed cert, or leaf certificates signed by a self-signed CA. For information about TLS, see the [TLS/SSL](https://docs.apigee.com/api-platform/system-administration/ssl).

**Learn more:**

- [About TLS/SSL](https://docs.apigee.com/api-platform/system-administration/about-ssl)
- [Using TLS with Edge](https://docs.apigee.com/api-platform/system-administration/using-ssl-edge)
- [Configuring Virtual Hosts FAQ](https://docs.apigee.com/api-platform/fundamentals/faq-configuring-virtual-hosts-edge-cloud)
- [About virtual hosts](https://docs.apigee.com/api-platform/fundamentals/virtual-hosts)
- [Virtual host property reference](https://docs.apigee.com/api-platform/fundamentals/virtual-host-property-reference)
- [Keystores and Truststores](https://docs.apigee.com/api-platform/system-administration/keystores-and-truststores)