By default, the Secure Channel by Encryption is enabled. You must provide certificate, private key, and certificate authority, and deploy the configuration to the Industrial Edge Runtime.
You can disable the secure connection at your own risk by un-checking the checkbox. You must be cautious when you have not enabled the secure connection, as the data in transit is not encrypted with unsecure connection and any hacker can intercept the traffic and gain access. This communication is then dependent on the external network security.
To enable end-to-end secure encryption, follow these steps:
-
By default the " Secure Channel by Encryption" check box is checked. Following window is expanded.
-
Upload .crt format certificate, .pem format private key, and .CA format certificate authority in "Certificate", "Private Key", and "Certificate Authority" fields respectively.
NOTICE
- You must ensure to upload CA (Certificate Authority) certificates that can accurately validate client certificates.
- For more information on Server certificate generation refer (https://mosquitto.org/man/mosquitto-tls-7.html)