diff --git a/application/src/main/data/upgrade/3.4.3/schema_update.sql b/application/src/main/data/upgrade/3.4.3/schema_update.sql
index 87e9e98aef..78203951ec 100644
--- a/application/src/main/data/upgrade/3.4.3/schema_update.sql
+++ b/application/src/main/data/upgrade/3.4.3/schema_update.sql
@@ -33,6 +33,8 @@ ALTER TABLE device_profile
     ADD COLUMN IF NOT EXISTS certificate_hash varchar,
     ADD COLUMN IF NOT EXISTS certificate_value varchar,
     ADD COLUMN IF NOT EXISTS certificate_regex_pattern varchar(255),
+    ADD COLUMN IF NOT EXISTS allow_create_device_by_x509 boolean,
     DROP CONSTRAINT IF EXISTS device_profile_credentials_hash_unq_key,
     ADD CONSTRAINT device_profile_credentials_hash_unq_key UNIQUE (certificate_hash);
+
 -- DEVICE PROFILE CERTIFICATE END
diff --git a/dao/src/main/resources/sql/schema-entities.sql b/dao/src/main/resources/sql/schema-entities.sql
index 6a2996bff7..eed6f237b6 100644
--- a/dao/src/main/resources/sql/schema-entities.sql
+++ b/dao/src/main/resources/sql/schema-entities.sql
@@ -297,6 +297,7 @@ CREATE TABLE IF NOT EXISTS device_profile (
     certificate_regex_pattern varchar(255),
     default_edge_rule_chain_id uuid,
     external_id uuid,
+    allow_create_device_by_x509 boolean,
     CONSTRAINT device_profile_credentials_hash_unq_key UNIQUE (certificate_hash),
     CONSTRAINT device_profile_name_unq_key UNIQUE (tenant_id, name),
     CONSTRAINT device_provision_key_unq_key UNIQUE (provision_device_key),