# Allowed TLS Hostname now configurable for Agent Controller

Agent Controllers now support **Allowed TLS Hostname** as a configurable field in your Aembit Tenant:

![Create an Agent Controller with TLS Hostname field](/_astro/edge-components-agent-controller-tls-hostname.DD3zsqAX_29Qu0R.webp)

**Allowed TLS Hostname** serves the same purpose as the [`AEMBIT_MANAGED_TLS_HOSTNAME`](/reference/edge-components/edge-component-env-vars#agent-controller-environment-variables) Agent Controller environment variable.

Configuring an **Allowed TLS Hostname** allows you to specify which domain name Aembit Managed TLS includes in the TLS certificate. This makes sure secure connections from your Agent Proxies are only valid when using this exact domain name to reach your Agent Controller, enhancing security without restricting which Agent Proxies can communicate with it.

To configure your Agent Controller with an allowed TLS hostname, see [How to create and Agent Controller](/user-guide/deploy-install/advanced-options/agent-controller/create-agent-controller) or [Configure Agent Controller TLS with Aembit’s PKI](/user-guide/deploy-install/advanced-options/agent-controller/configure-aembit-pki-agent-controller-tls).