diff --git a/solutions/observability/synthetics/cli.md b/solutions/observability/synthetics/cli.md
index cd579ba422..65e50a7e83 100644
--- a/solutions/observability/synthetics/cli.md
+++ b/solutions/observability/synthetics/cli.md
@@ -290,4 +290,8 @@ npx @elastic/synthetics totp <secret> --issuer <issuer> --label <label>
 :   Name of the provider or service that is assocaited with the account.
 
 `--label <string>`
-:   Identifier for the account. Defaults to `SyntheticsTOTP`
\ No newline at end of file
+:   Identifier for the account. Defaults to `SyntheticsTOTP`
+
+## Air-gapped environments
+
+When working in air-gapped environments, setup can become complex and require workarounds. One common issue is Node.js installations or containers not trusting custom certificates. To bypass certificate errors, prefix `npx` related commands with `NODE_TLS_REJECT_UNAUTHORIZED=0`. For example, `NODE_TLS_REJECT_UNAUTHORIZED=0 npx @elastic/synthetics init project-name`. This allows the command to bypass the certificate validations for all TLS connections.