<?xml-stylesheet type="text/xsl" href="https://community.element14.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Connect to AVNET iotconnect.io with Node-RED - part 8b: safer connect with CA certificates</title><link>/technologies/industrial-automation-space/b/blog/posts/connect-to-avnet-iotconnect-io-with-node-red---part-8b-safer-connect-with-ca-certificates</link><description>AVNET&amp;#39;s iotconnect.io cloud platform is an online service that you can use to send data to, and then show it on a dashboard. In this blog series I&amp;#39;m learning how to talk to it with Node-RED.In this post: authentication with a CA generated certificate</description><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>RE: Connect to AVNET iotconnect.io with Node-RED - part 8b: safer connect with CA certificates</title><link>https://community.element14.com/technologies/industrial-automation-space/b/blog/posts/connect-to-avnet-iotconnect-io-with-node-red---part-8b-safer-connect-with-ca-certificates</link><pubDate>Sat, 10 Apr 2021 18:50:38 GMT</pubDate><guid isPermaLink="false">93d5dcb4-84c2-446f-b2cb-99731719e767:bb8c049b-7143-4889-8e44-41a49f9b1e7f</guid><dc:creator>Jan Cumps</dc:creator><slash:comments>1</slash:comments><description>&lt;p&gt;Today I learned how to generate an intermediate CA.&lt;/p&gt;&lt;p&gt;It is a certificate that can be used to create new certificates (e.g.: for IoT Things), but is not your root certificate.&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;If you outsource the programming of your devices to a 3rd party, you can make an intermediate certificate for that particular subcontracter.&lt;/p&gt;&lt;p&gt;You don&amp;#39;t have to share your root private key or password with them.&lt;/p&gt;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&lt;p&gt;The subcontracter can then generate the key-and-certificate pair for each device they program.&lt;/p&gt;&lt;p&gt;There is traceability: it can be checked what intermediate certificate was used to create it.&lt;/p&gt;&lt;img src="https://community.element14.com/aggbug?PostID=11117&amp;AppID=141&amp;AppType=Weblog&amp;ContentType=0" width="1" height="1"&gt;</description></item></channel></rss>