Is it possible to update the CA on the 9160 for example

[Loren Rogers]

Hello,

I have an application that runs on a 9160 which uses mbedtls (via TFM) to connect to an AWS server.  The application is using a CA that you folks have given me in the form of PEM with quotes and \n. My concern is that the CA cert(s) might need to be updated in the future.  Is this feasible? If so, could you please walk me through how it could be done?

Thanks

/Loren

[Charlie]

Hi Loren,

I am not sure in which condition you need to update the CA certificates. It is not good practice in real products for security reasons. This will also occupy pretty big flash space on your application side, but it is possible, nRF9160: HTTPS Client demos how to load CA certificate from your application to the modem.

Best regards,

Charlie