```bash
cd client-bundle && eval "$(
```cmd
REM Run this from an elevated prompt session
cd client-bundle && env.cmd
```
```cmd
# Run this from an elevated PowerShell session
cd client-bundle; Import-Module .\env.ps1
```
The client bundle utility scripts update the environment variables
`DOCKER_HOST` to make your client tools communicate with your UCP deployment,
and the `DOCKER_CERT_PATH` environment variable to use the client certificates
that are included in the client bundle you downloaded. The utility scripts also
run the `kubectl config` command to configure kubectl.
To confirm that your client tools are now communicating with UCP, run:
```bash
{% raw %}
docker version --format '{{.Server.Version}}'
{% endraw %}
```
```bash
kubectl config current-context
```
The expected Docker server version starts with `ucp/`, and the expected
kubectl context name starts with `ucp_`.
You can now use the Docker and kubectl clients to create resources in UCP.
### Use client certificates with Docker contexts
In Docker Enterprise 3.0, new files are contained in the UCP bundle. These changes support
the use of `.zip` files with `docker context import` and allow you to directly change
your context using the bundle `.zip` file. Navigate to the directory where you downloaded
the user bundle and use `docker context import` to add the new context:
```bash
cd client-bundle && docker context import myucp ucp-bundle-$USER.zip"
```
> **Note**: Refer to [Working with Contexts](/engine/context/working-with-contexts/)
for more information on using Docker contexts.
## Client certificates for administrators
UCP issues different types of certificates depending on the user:
* User certificate bundles: only allow running docker commands through a UCP
manager node.
* Admin user certificate bundles: allow running docker commands on the
Docker Engine of any node.
## Download client certificates by using the REST API
You can also download client bundles by using the
[UCP REST API](/reference/ucp/3.0/api/). In this example,
we use `curl` to make the web requests to the API, `jq` to parse the
responses, and `unzip` to unpack the zip archive.
To install these tools on an Ubuntu distribution, you can run:
```bash
sudo apt-get update && sudo apt-get install curl jq unzip
```
Then you get an authentication token from UCP and use it to download the
client certificates.
```bash
# Create an environment variable with the user security token
AUTHTOKEN=$(curl -sk -d '{"username":"