Edge device connectors verify secure connections by checking whether the certificate presented by the remote service was signed by a trusted Certificate Authority (CA). By default, devices only trust well-known public CAs. In certain enterprise networks, security infrastructure such as Deep Packet Inspection (DPI) appliances and SSL proxies intercept and resign traffic using internal or private CAs which edge devices don't recognize. This can cause TLS handshake failures and broken connector connections.

Custom CA certificate management lets you upload your organization's internal CA certificates to Litmus Edge Manager. LEM deploys them to connected edge devices, where connectors automatically append them to the system trust store. This allows connectors (including the MQTT SSL connector) to establish secure connections through your enterprise security infrastructure without manual certificate work on each device. Newly activated devices receive the current CA bundle automatically during provisioning.

To access CA Certificates UI:

In the Litmus Edge Manager Admin Console, select Edge Devices > CA Certificates.

The CA Certificates pane lists all uploaded certificates with the following details:

To upload a CA certificate:

The certificate appears in the CA certificates list and is queued for deployment to connected edge devices.

After uploading a certificate, you must sync it to your edge devices to distribute the updated CA bundle. Syncing is managed at the project level from the User UI. See Certificates for more information.

To delete a CA certificate:

The certificate is removed from the pool.