Certificates

the certificates section is used to store certificates locally in litmus edge self signed certificates when your instance of litmus edge boots up for the first time, a self signed certificate is automatically created because the certificate generated by litmus edge is self signed, web browsers detect that the certificate is not formally approved by a certificate authority that is why you will get browser warnings that the connection is not private/secure see docid\ f 4fuf7kbozitsh lmxp4 for more information despite these warnings, all communication through litmus edge and litmus edge manager is done through https , which means it's encrypted end to end and the connection is always secure litmus edge gives you the option to upload certificates and copy device public keys as required by your organization device certificates a device certificate (or ssl certificate) is a digital certificate that provides proof of the device's identity (litmus edge instance) if required by your organization, you can replace the self signed certificate generated by litmus edge with your own device certificate when you upload a device certificate, the connection to the device is validated as a secure connection for details on uploading a device certificate, see docid svjnumblyuhufxxzpgec device certificate use cases you are not required to upload a device certificate for your instance of litmus edge, but your organization may decide to upload one for the following use cases your organization's it policies require proper signed certificates for your litmus edge instance your organization requires a domain name and any respective certificates to be attached to your litmus edge instance device certificate requirements the certificate you upload must be an nginx certificate when uploading a device certificate, you will need to provide the following parameters ssl certificate the public key certificate associated with the device certificate ca chain the certificate authority's chain of certificates that validates the device certificate's public and private keys when validating this parameter, make sure it includes all intermediate certificate authorities private rsa key the private key certificate associated with the device certificate reset device certificates you have the option of using the reset to self signed device certificate function for device certificates this replaces the existing certificate with the automatically generated self signed one and creates a new expiry date for the certificate before you reset the certificate, verify that any system communicating with litmus edge will not be negatively affected, as this invalidates all active ui sessions and the receiving of data from external sources custom ca certificates a ca certificate is a digital certificate issued by a certificate authority (ca) the ca certificate allows valid and secure connections between litmus edge and other systems learn more about https //en wikipedia org/wiki/certificate authority from wikipedia to create a valid and secure connection between litmus edge and litmus edge manager, a custom ca certificate needs to be generated to complete this specific task, see docid\ wao2ypjsg1 afdxtodqxw for details to upload a custom ca certificate not related to validating communication between litmus edge and litmus edge manager, see docid\ ifuyfnv42ngjaqxvtsghk important when uploading a custom ca certificate, make sure the file is in crt format and that x509 encoding is used custom ca certificate use cases you can upload custom ca certificates for the following use cases enable a valid connection between litmus edge and litmus edge manger by providing the litmus edge manager url as the endpoint for this specific use case, see docid\ wao2ypjsg1 afdxtodqxw for details depending on the specific requirements of your organization, upload any required certificates provided by private cas if you are using integrations to connect to cloud services, some of these services may use custom certificate authorities that are not available from the trusted ca store in the litmus edge instance in this scenario, you would need to add these ca certificates to the list of trusted custom ca certificates if you have a private docker registry, the applications marketplace refuses to connect to the registry because it is unable to validate the certificate you would then need to manually update the custom ca certificates device public keys the device public key is the litmus edge system's identity/device footprint it is not related to certificates if your organization requires public keys to be accepted, you can copy it from the device public key section identity certificates identity certificates are required when a connection between a device (litmus edge instance) and another service needs to be authenticated for example, when a connection is set up between litmus edge and litmus edge manager, an identity certificate is created that can be viewed in litmus edge litmus edge can have multiple identity certificates signed by different authorities when you create a connection between litmus edge and litmus edge manager, an identity certificate is automatically created that can't be deleted from litmus edge certificate signing requests a certificate signing request (csr) is used to apply for an ssl/tls certificate the csr contains information that the certificate authority will use to create the certificate, such as common name, organization, and country it also contains the public key that will be included in your certificate and is signed with the corresponding private key you can copy/download the certificate signing request in litmus edge and send it to a certificate authority for authorization the certificate authority can then send back a signed identity certificate you can then install this identity certificate in litmus edge see docid\ eww ambkr6jlh5x0a3iyw and docid\ x0gulyp0xr 2outqhmrmr for more details access system certificates ui to access the certificates page log in to litmus edge navigate to system > network > certificates the certificates canvas appears refer to the following actions you can take on the litmus edge user ui's certificates pane action \[1] docid svjnumblyuhufxxzpgec \[2] device certificates details table \[3] docid\ ifuyfnv42ngjaqxvtsghk \[4] action remove certificate see docid\ pezrtzchjmhlivyjz9t98 for details show details see docid\ pezrtzchjmhlivyjz9t98 for details \[5] copy to clipboard see docid\ x0gulyp0xr 2outqhmrmr for details \[6] install certificate see docid\ eww ambkr6jlh5x0a3iyw for details \[7] create request see docid\ eww ambkr6jlh5x0a3iyw for details \[8] action download copy next steps docid svjnumblyuhufxxzpgec docid\ ifuyfnv42ngjaqxvtsghk docid\ pezrtzchjmhlivyjz9t98 docid\ eww ambkr6jlh5x0a3iyw docid\ x0gulyp0xr 2outqhmrmr