Page History

...

At this point, the Java keystore simply needs to be set in MQTT Distributor's configuration.  Do so by browsing the the Ignition Gateway Web UI and select the Configure tab:

Image Removed

.  Then select MQTT Distributor settings on the left side menu :

Image Removed

as shown below.

Image Added Find the 'TLS Setting' section of the General Settings tab as shown below.

Image AddedMake sure the 'Enable TLS' is checked.  Select the 'Java Keystore File' 'Browse' You should see the following.  The bottom option is to specify a Java Keystore File.  Select the browse button and then browse to the Java Keystore file you created above.

Image Removed

Also, make sure to enter Enter the Keystore password and click the Enable TLS tick box as shown below and then click Save Changes:

Image Removed

 .

At this point, all MQTT clients can now connect over TLS enabled connections.  Note the new port of 8883.  If using a certificate signed by a publicly trusted CA, the clients don't have to make any modifications to their list of trusted root certificates.  If using a self-signed certificate there are a couple options:

...