Whitelist new certificate
-
The Device Portal team receives the certificate from a customer (probably a Device Manufacturer).
-
The Device Portal team will send a mail with the new certificate (or certificate chain included new root certificate) to you.
-
Case 1: there is already a certificate chain with the same root certificate: You can add the new intermediate certificate at the end of the already whitelisted certificate chain, after the last certificate.
Case 2: there is no chain whitelisted with the same root:
-
Add the root and the intermediate after the last certificate.
-
If there are several certificates in the chain between the root and the intermediate used to sign the device certificates, they all need to be added:
-
-
Add the certificate(s) to the inventory under the variable .Values.global.modules.deviceportal.mtlsGateway.tls.whitelistedCerts
-
Apply the changes.
-
When using an NGINX: Restart the NGINX pod.
-
When using Kubernetes NGINX Ingress Controller: Trigger a sync or redeployment.
-
-
Reply to the Device Portal team’s mail to inform them that the certificates have been whitelisted.