Authenticate device with x509 certificate chain

Question

Hi,
I have a x509 certificate chain (Root CA -> Intermedicate Cert -> Device cert). I want to authenticate mydevice with IoT Central, so do I need to verify both Intermediate and Root certificate on IoT central?

Answer 1

Hello @Vu Huy Hop (GAM.VN.DAP)

Please see the below sections for more understanding!

X.509 group enrollment
In a production environment, using X.509 certificates is the recommended device authentication mechanism for IoT Central.
To learn more, see Device Authentication using X.509 CA Certificates.

To connect a device with an X.509 certificate to your application:

1. Create an enrollment group that uses the Certificates (X.509) attestation type.
2. Add and verify an intermediate (OR) root X.509 certificate in the enrollment group.
3. Generate a leaf certificate from the root or intermediate certificate in the enrollment group. Send the leaf certificate from the device when it connects to your application.

To learn more, see How to connect devices with X.509 certificates

If the response is helpful, please click "Accept Answer" and upvote it.