---
title: "Set up Docker Hub and DHI upstreams with Cloudsmith-managed authentication "
description: "Cloudsmith now handles authentication for Docker Hub and Docker Hardened Images (DHI) upstreams using a managed token, removing the need to supply your own credentials during setup. Authenticated requests receive a higher rate limit than anonymous access."
canonical_url: "https://cloudsmith.com/changelog/set-up-docker-hub-and-dhi-upstreams-with-cloudsmith-managed-authentication"
last_updated: "2026-06-29T16:41:57.181Z"
---
# Set up Docker Hub and DHI upstreams with Cloudsmith-managed authentication 

Cloudsmith now handles authentication for Docker Hub and Docker Hardened Images (DHI) upstreams using a managed token, removing the need to supply your own credentials during setup. Authenticated requests receive a higher rate limit than anonymous access.

## How it works

When a Docker Hub or DHI upstream is created without credentials, Cloudsmith uses a managed Docker Hub organization access token (OAT) to authenticate requests on your behalf. Workspace names are shared with Docker to attribute usage when the Cloudsmith-managed token is used.  


### New pre-configured DHI upstream

A pre-configured DHI upstream is also available, so you can start proxying and caching images from the DHI Community tier immediately.  


```json
{
  "_key": "4bb9c01d430e",
  "_type": "image",
  "asset": {
    "_createdAt": "2026-06-29T14:37:27Z",
    "_id": "image-991df03f958a497ceafebdfd1dd25f1569130dae-2154x1302-png",
    "_rev": "p2MNacwCkawDbXlBiC2Zhd",
    "_type": "sanity.imageAsset",
    "_updatedAt": "2026-06-29T14:37:27Z",
    "assetId": "991df03f958a497ceafebdfd1dd25f1569130dae",
    "extension": "png",
    "metadata": {
      "_type": "sanity.imageMetadata",
      "blurHash": "MJR:Qi^*-oWXRk~o9aIpt6t64:%Lt7RjR*",
      "dimensions": {
        "_type": "sanity.imageDimensions",
        "aspectRatio": 1.6543778801843319,
        "height": 1302,
        "width": 2154
      },
      "hasAlpha": true,
      "isOpaque": true,
      "lqip": "data:image/png;base64,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",
      "palette": {
        "_type": "sanity.imagePalette",
        "darkMuted": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#51484d",
          "foreground": "#fff",
          "population": 0.04,
          "title": "#fff"
        },
        "darkVibrant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#042c86",
          "foreground": "#fff",
          "population": 0.01,
          "title": "#fff"
        },
        "dominant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#a4b7d5",
          "foreground": "#000",
          "population": 0.26,
          "title": "#fff"
        },
        "lightMuted": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#a4b7d5",
          "foreground": "#000",
          "population": 0.26,
          "title": "#fff"
        },
        "lightVibrant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#9ae8fa",
          "foreground": "#000",
          "population": 0.03,
          "title": "#000"
        },
        "muted": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#5ca4a4",
          "foreground": "#fff",
          "population": 0,
          "title": "#fff"
        },
        "vibrant": {
          "_type": "sanity.imagePaletteSwatch",
          "background": "#1452e0",
          "foreground": "#fff",
          "population": 0.01,
          "title": "#fff"
        }
      },
      "thumbHash": "vPcFDIKsdpY/hYiwaV2sP9H6Ew=="
    },
    "mimeType": "image/png",
    "originalFilename": "DHI_Community_upstream.png",
    "path": "images/rafvlnhi/production/991df03f958a497ceafebdfd1dd25f1569130dae-2154x1302.png",
    "sha1hash": "991df03f958a497ceafebdfd1dd25f1569130dae",
    "size": 247777,
    "uploadId": "27612592606a2ae0b85d4e4fbb9e8f238b7ab857",
    "url": "https://cdn.sanity.io/images/rafvlnhi/production/991df03f958a497ceafebdfd1dd25f1569130dae-2154x1302.png"
  },
  "link": {
    "_type": "link",
    "href": null,
    "openInNewTab": false
  },
  "markDefs": null
}
```

[DHI](https://hub.docker.com/hardened-images/catalog) are minimal, secure, and production-ready container base and application images maintained by Docker. Designed to reduce vulnerabilities and simplify compliance, DHI integrate easily into your existing Docker-based workflows with little to no retooling required.



```json
{
  "_key": "d28c72d46c0a",
  "_type": "callout",
  "content": [
    {
      "_key": "99a4bc885ec1",
      "_type": "block",
      "children": [
        {
          "_key": "81a9b07219e4",
          "_type": "span",
          "marks": [],
          "text": "To access the DHI Select or Enterprise tiers, you must configure the DHI registry as a private upstream with your Docker Hub credentials."
        }
      ],
      "markDefs": [],
      "style": "normal"
    }
  ],
  "markDefs": null,
  "variant": "info"
}
```



For more information about creating Docker Hub and DHI upstreams in Cloudsmith, see:

- [Integrating with Docker Hub](https://docs.cloudsmith.com/integrations/integrating-with-docker-hub)
- [Integrating with Docker Hardened Images](https://docs.cloudsmith.com/integrations/integrating-with-docker-hardened-images)