Show Contents

# 3. Install the certificates in the device file system

Your device must establish a secure connection with AWS IoT using X.509 certificates. You must generate these certificates and register them in your AWS account:

1. To create and register the certificates, see the AWS IoT documentation.
2. Install the certificate and private key associated with your device, for example inside the/etc/ssl/certs directory.

    ~> scp <root_ca_file_name> root@<ip>:/etc/ssl/certs/
    ~> scp <signed_cert_file_name> root@<ip>:/etc/ssl/certs/
    ~> scp <private_key_file_name> root@<ip>:/etc/ssl/certs/
    ~> sync

- <root_ca_file_name> is the Verisign root CA server certificate used to authenticate the AWS IoT server. You can download it from https://www.symantec.com/content/en/us/enterprise/verisign/roots/VeriSign-Class%203-Public-Primary-Certification-Authority-G5.pem.
- <signed_cert_file_name> is the certificate attached to your Thing.
- <private_key_file_name> is the Thing's private key.
- <ip> is your device IP.

© 2018 Digi International Inc. All rights reserved.
3. Install the certificates in the device file system updated on 22 January 2018 02:43:38 PM