Embedded devices (IoT) and certificates: what sustainable strategy to adopt?
If you have a fleet of embedded devices that have their own certificate stores, it is very important to establish a certificate import strategy. This is to avoid future problems when renewing your certificate or if there is a change of authority.
A sustainable strategy is to import root certificates from different authorities. However, it is not advisable to import intermediate certificates (part of the certification chain) because these certificates are subject to frequent changes (every 2/3 years).
TBS advises the following strategy:
- Only import root certificates.
- Import several root certificates per authority (minimum 2 root certificates).
- Import several authorities (Sectigo, Digicert, GlobalSign, Certigna).
- Carry out a root certificates check at least once a year.
You can download the root certificates from our FAQ : Root certificates
Useful links
Last edited on 02/23/2021 08:59:42 --- [search]