Kaspersky IoT Secure Gateway 100

Securing a connection over the MQTT protocol

To securely transmit data over the MQTT protocol:

1. Copy the file containing the
   certificate chain

   Combination of any number of intermediate certificates between the end-entity certificate and the root certificate.

   of the MQTT client (a chain can consist of one leaf
   certificate

   Data structure with a digital signature containing a public encryption key and the ID of the client or server.

   of the client) to the directory /app/Core/pki/certs/transfer/mqtt/publisher on the HW-IDS partition of the microSD card.
2. Copy the file containing the certificate chain that was used to form the
   digital signature

   A value calculated with an encryption algorithm and added to data in such a way that any data recipient can use the signature to verify the origin and integrity of the data.

   to the directory /app/Core/pki/certs/transfer/mqtt/publisher on the HW-IDS partition of the microSD card.
3. Copy the file of the private
   encryption key

   Component of a pair of encryption keys used for asymmetric encryption. Keys can be public or private.

   of the MQTT client to the directory /app/Core/pki/private/transfer/mqtt/publisher on the HW-IDS partition of the microSD card.

The certificates and encryption keys used by the MQTT client must be in PEM format. The key length of the client certificate must be at least 2048 bits.