diff --git a/ydb/tools/cfg/base.py b/ydb/tools/cfg/base.py
index fcce5cf4bb17..da086ffc1fe8 100644
--- a/ydb/tools/cfg/base.py
+++ b/ydb/tools/cfg/base.py
@@ -293,6 +293,7 @@ def __init__(self, template, walle_provider, validator=None, database=None):
         self.static_cpu_count = self.__cluster_description.get("static_cpu_count", 20)
         self.dynamic_cpu_count = self.__cluster_description.get("dynamic_cpu_count", 8)
         self.force_io_pool_threads = self.__cluster_description.get("force_io_pool_threads", None)
+        self.client_certificate_authorization = self.__cluster_description.get("client_certificate_authorization")
         self.blob_storage_config = self.__cluster_description.get("blob_storage_config")
         self.pdisk_key_config = self.__cluster_description.get("pdisk_key_config", {})
         if not self.need_txt_files and not self.use_new_style_kikimr_cfg:
diff --git a/ydb/tools/cfg/static.py b/ydb/tools/cfg/static.py
index f310546477f2..2d7695a4837c 100644
--- a/ydb/tools/cfg/static.py
+++ b/ydb/tools/cfg/static.py
@@ -393,6 +393,9 @@ def get_normalized_config(self):
         if self.column_shard_config:
             normalized_config["column_shard_config"] = self.column_shard_config
 
+        if self.__cluster_details.client_certificate_authorization is not None:
+            normalized_config["client_certificate_authorization"] = self.__cluster_details.client_certificate_authorization
+
         if self.__cluster_details.blob_storage_config is not None:
             normalized_config["blob_storage_config"] = self.__cluster_details.blob_storage_config
         else: