Generate a x509 certificate

Question

I've created a certificate at the Azure Portal with the intention of creating edge device certificates from it. After importing the certificate into my .NET application with Azure Key Vault client, I've run into this issue when creating a new cert off it. How to create a new certificate with Basic Constraints extension set to True (at the Portal may not be possible yet)? I have a bash script for creating certificates, but am having trouble loading them into Key Vault (error: missing private key).

"The issuer certificate does not have an appropriate value for the Basic Constraints extension. (Parameter 'issuerCertificate')"

Answer 1

Hello @Omar Navarro ,

Azure IoT Edge devices use a certificate to secure the internal communication related to Azure IoT Edge modules.

You can add your own certificates but the currently documented demonstration is based on self-signed certificates.

I recommend testing this situation first before moving on.

For more information, check this explanation.