Skip to content
Profiles Service

Create a Bring Your Own (BYO) Client Certificate

You can create or use your own certificate authority to create a client certificate to register a device in Profiles.

To create a BYO client certificate:

  1. Generate CA key

openssl ecparam -genkey -out CA.key -name prime256v1 2. Generate CA pem

openssl req -new -key CA.key -x509 -nodes -days 365 -out CA.pem -subj “/O=IoT CN=CA1" 3. Generate device key

openssl genrsa -out Device.key 2048 4. Generate device CSR

openssl req -new -key Device.key -out Device.csr -subj "/O=IoT CN=CA1Device1"

DeviceName in CN field is mandatory. 5. Generate device certificate

openssl x509 -req -in Device.csr -CA CA.pem -CAkey CA.key -CAcreateserial -out Device.pem -days 3650 -sha256 6. View certificate details

openssl x509 -in Device.pem -noout -text 7. Register

Finally, raise a request with Trimble Cloud Support to register a pem with the same CN name defined during the certificate generation.

For more information on adding certificates, see API Reference.