Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Server side configuration
    • Enable SSL on Chariot
    • Set server side certificates and keys (serverCA.crt, server.key, and server.crt) on Chariot
    • Add Clients CA certificates (engineCA.crt and transmissionCA.crt) to the Chariot truststore
    • Set the ‘Clients Authentication Policy’ on Chariot to “required”
  • Client side configuration
    • Add the serverCA.crt, engine.key, and engine.crt to the ‘Chariot’ connection on the MQTT Engine side.
    • Add the serverCA.crt, transmission.key, and transmission.crt to the ‘Chariot’ connection on the MQTT Transmission side. 


Anchor
MQTTEngineClientSide
MQTTEngineClientSide
MQTT Engine Client Side Configuration

Add the certificates to the MQTT Engine > Servers > Certificates configuration as shown below:

Friendly NameCertificate FilenameFile Description
ChariotCA_CertificateserverCA.crtChariot CA Certificate
EngineCertificateengine.crtMQTT Engine Certificate
EngineKeyengine.keyMQTT Engine Private Key


Update the MQTT Engine > Servers > Settings configuration to use the certificates as shown below:

Configuration ParameterSetting
URLssl://FQDN:8883 where the FQDN is the Common Name associated with the certificates
CA Certificate FileChariotCA_Certificate
Client Certificate FileEngineCertificate
Client Private Key FileEngineKey


Anchor
MQTTTransmissionClientSide
MQTTTransmissionClientSide
MQTT Transmission Client Side Configuration

Add certificates to the MQTT Transmission > Servers > Certificates configuration as shown below:

Friendly NameCertificate FilenameFile Description
ChariotCA_CertificateserverCA.crtChariot CA Certificate
TransmissionCertificatetransmission.crtMQTT Transmission Certificate
TransmissionKeytransmission.keyMQTT Transmission Private Key


Update the MQTT Transmission > Servers > Settings configuration to use the certificates as shown below:

Configuration FieldSetting
URL
CA Certificate File
Client Certificate File
Client Private Key File