• State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 69 subscribers
  • Views 823 views
  • Users 0 members are here
Attachments (0)
Nordic Case Info
  • Case ID: 275288
Options
This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Azure IoT hub certificates Expiration

Adarsh__R

I have followed the Azure IoT Hub — nRF Connect SDK 1.6.99 documentation (nordicsemi.com) and was able to comminicate with Azure IoT hub.I have created rootCA and device certificates by following Tutorial - Use Microsoft scripts to create x.509 test certificates for Azure IoT Hub | Microsoft Docs .

  1. Is rootCA,public and private certificates valid for only for 30 days ? or Is it just the rootCA certificate ?
  2. I had some difficulties in generating rootCA for the second time from the same system and I created it another computer.Will that be an issue ? Do I need to create all the certifictaes in the same computer ? 
  3. Is it mandatory to delete the old rootCA certificate from IoT hub ?
  • +1

    Hello, 

    Is rootCA,public and private certificates valid for only for 30 days ? or Is it just the rootCA certificate ?

     Certificate expiration is user defined, they can pick whatever duration they want. Typically you want something very long for the device certificate (like 30 years).

    I had some difficulties in generating rootCA for the second time from the same system and I created it another computer.Will that be an issue ? Do I need to create all the certifictaes in the same computer ? 

     No. Certificates are in the end random strings, they can be generated everywhere and don't need to be generated on the same device.

    Is it mandatory to delete the old rootCA certificate from IoT hub ?

     No, Azure IoT Hub allows multiple root CAs in DPS: https://docs.microsoft.com/en-us/azure/iot-dps/tutorial-custom-hsm-enrollment-group-x509.

    Kind regards,
    Øyvind

Related