Managing Client Side Mutual SSL Certificates

WSO2 IoT Server supports mutual SSL, where the client verifies that the server can be trusted and the server verifies that the client can be trusted by using digital signatures. The following sections illustrate how to manage the client-side mutual SSL certificates.

This section guides you through adding, deleting, searching, and sorting certificates in WSO2 IoT Server.  

Adding certificates

Follow the instructions given below to add certificates:

1. Sign in to the WSO2 IoT Server device management console and click the  icon.
2. Click Configuration Management > Certificate Configurations.
   
3. Click ADD CERTIFICATE, and Upload the SSL certificate.
   
4. Click Add Certificate to finish adding the certificate.
   Once the certificate is added successfully click View Certificate List to view the certificates you have uploaded or click Add Another Certificate to upload another SSL certificate. 

Removing certificates

Follow the instructions given below to delete a certificate: 

1. Click on the menu icon, and then click Configuration Management.
2. Click Certificate Configuration. You will see a list of all the certificates that have been uploaded as shown below. 
   

3. Click on the  icon to delete a certificate.

   If you are unable to find your certificate on the list, you can first search for the certificate by its serial number, and then delete it.

4. Click REMOVE to confirm that you wish to delete the certificate.
   

Searching certificates

Follow the instructions given below to search for a particular certificate: 

1. Click on the menu icon and then click Configuration Management.
2. Click Certificate Configuration. You will see a list of all the certificates that have been uploaded as shown below. 
   
3. Enter the full serial number of the certificate you want to search for or part of it, and click Search.
   

Sorting certificates

Follow the instructions given below to sort the certificates: 

1. Click on the menu icon, and then click Configuration Management.
2. Click Certificate Configuration.
3. Hover over the sort icon found on the top right corner of the screen, and click By Serial Number.