diff --git a/docs/04-etcd.md b/docs/04-etcd.md
index 6aacc6c..69897d8 100644
--- a/docs/04-etcd.md
+++ b/docs/04-etcd.md
@@ -91,6 +91,8 @@ ExecStart=/usr/bin/etcd \\
   --peer-key-file=/etc/etcd/kubernetes-key.pem \\
   --trusted-ca-file=/etc/etcd/ca.pem \\
   --peer-trusted-ca-file=/etc/etcd/ca.pem \\
+  --peer-client-cert-auth \\
+  --client-cert-auth \\
   --initial-advertise-peer-urls https://${INTERNAL_IP}:2380 \\
   --listen-peer-urls https://${INTERNAL_IP}:2380 \\
   --listen-client-urls https://${INTERNAL_IP}:2379,http://127.0.0.1:2379 \\