diff --git a/charts/cx-ve/Chart.lock b/charts/cx-ve/Chart.lock
index cbbd113..e909a03 100644
--- a/charts/cx-ve/Chart.lock
+++ b/charts/cx-ve/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: core-platform-distribution
   repository: oci://ghcr.io/eclipse-cfm/charts
-  version: 0.0.18
+  version: 0.0.19
 - name: catenax-profile
   repository: oci://ghcr.io/metaform/charts
   version: 0.0.10
@@ -11,5 +11,5 @@ dependencies:
 - name: certo
   repository: oci://ghcr.io/metaform/charts
   version: 0.0.4
-digest: sha256:f663ce64d8790f40e4c3cddad7f5a468bddf32f842968d6714174aeda657e377
-generated: "2026-08-13T09:41:07.818051+02:00"
+digest: sha256:cb0998eb575ba9cb3f9d41941e4cd0869a982cef2099e5e5aa2a6069028ab597
+generated: "2026-08-19T16:31:38.079559909+02:00"
diff --git a/charts/cx-ve/Chart.yaml b/charts/cx-ve/Chart.yaml
index cc1e215..7b1b5c9 100644
--- a/charts/cx-ve/Chart.yaml
+++ b/charts/cx-ve/Chart.yaml
@@ -16,7 +16,7 @@ dependencies:
   # infra (NATS/Vault/Postgres/telemetry) + generic platform seeding
   - name: core-platform-distribution
     repository: oci://ghcr.io/eclipse-cfm/charts
-    version: 0.0.18
+    version: 0.0.19
   # Catena-X dataspace seeding (issuer credentials, dataspace profile, EDC seed), layered on
   # the platform. 0.0.9+ carries hook weights 110-130 so its seeds run after the platform's
   # 10/20 hooks in the release's shared hook space.
diff --git a/onboarding-api/src/main/java/com/metaform/cxve/adapter/out/cfm/ParticipantOnboardingService.java b/onboarding-api/src/main/java/com/metaform/cxve/adapter/out/cfm/ParticipantOnboardingService.java
index a3086b3..2d73d49 100644
--- a/onboarding-api/src/main/java/com/metaform/cxve/adapter/out/cfm/ParticipantOnboardingService.java
+++ b/onboarding-api/src/main/java/com/metaform/cxve/adapter/out/cfm/ParticipantOnboardingService.java
@@ -126,7 +126,9 @@ private ParticipantProfile toParticipantProfile(String dataspaceId, PartnerRegis
                     transferTypeMapping(ccmTransferType, ccmEndpointType, ccmEndpoint, ccmTokenSource));
         }
         if (!transferTypeMappings.isEmpty()) {
-            builder.vpaProperty("cfm.dataplane", Map.of("transferTypeMappings", transferTypeMappings));
+            builder.vpaProperty("cfm.dataplane", Map.of(
+                    "authorization", Map.of("type", "oauth2_token_exchange"),
+                    "transferTypeMappings", transferTypeMappings));
         }
         return builder.build();
     }