A computer-implemented method for isolating, on one side, communications between a consensus node and another consensus node , and, on another side, communications between the consensus node and a client node , comprising: generating , by the consensus node , a certificate signing request, i.e., CSR; sending the CSR to a first certificate authority, i.e., CA ; receiving a) a first public key certificate of the consensus node from the first CA in response to the CSR, and b) a first public key certificate of the other consensus node, wherein the first public key certificate of the other consensus node is issued by the first CA ; sending the CSR to a second CA ; receiving a) a second public key certificate of the consensus node from the second CA in response to the CSR, and b) a second public key certificate of the client node, wherein the second public key certificate of the client node is issued by the second CA ; configuring , on the consensus node , a first truststore including the first public key certificate of the consensus node and the first public key certificate of the other consensus node, wherein the consensus node is configured to use the first public key certificates to communicate with the other consensus node, and; configuring , on the consensus node, a second truststore including the second public key certificate of the consensus node and the second public key certificate of the client node, wherein the consensus node is configured to use the second public key certificates to communicate with the client node. generating , by the consensus node , a certificate signing request, i.e., CSR; sending the CSR to a first certificate authority, i.e., CA ; receiving a) a first public key certificate of the consensus node from the first CA in response to the CSR, and b) a first public key certificate of the other consensus node, wherein the first public key certificate of the other consensus node is issued by the first CA ; a) a first public key certificate of the consensus node from the first CA in response to the CSR, and b) a first public key certificate of the other consensus node, wherein the first public key certificate of the other consensus node is issued by the first CA ; sending the CSR to a second CA ; receiving a) a second public key certificate of the consensus node from the second CA in response to the CSR, and b) a second public key certificate of the client node, wherein the second public key certificate of the client node is issued by the second CA ; a) a second public key certificate of the consensus node from the second CA in response to the CSR, and b) a second public key certificate of the client node, wherein the second public key certificate of the client node is issued by the second CA ; configuring , on the consensus node , a first truststore including the first public key certificate of the consensus node and the first public key certificate of the other consensus node, wherein the consensus node is configured to use the first public key certificates to communicate with the other consensus node, and; configuring , on the consensus node, a second truststore including the second public key certificate of the consensus node and the second public key certificate of the client node, wherein the consensus node is configured to use the second public key certificates to communicate with the client node. <EOS>