Install CA and certificate files on the IoT View target station

This is a procedure installing the CA and certificate files on the IoT View target station using the Install.sh script.

This task uses the installation script (install.sh), which must be available on the IoT View target station. Please see Install and run IoT View on a target station for more information. Root privileges are required to run install.sh on the target station. This is typically done by running the script using sudo. You may also install the CA and certificate files without the script; see Manually Configuring IoT View for Secure Channel Communication.

SecureChannelCertificateInstaller.ps1 will create file names that are recognized by the install.sh script. Your company may provide files with a different naming syntax. Before you begin, rename them following the syntax below.

You should have these files:

• A CA certificate PEM file, which follows the syntax for a CA certificate CER file: RootCA_<40-character alphanumeric string>.pem, for example RootCA_52B0188BBD56D07475B29FE30C4017AF4A7D9052.pem

• A client certificate PEM file syntax is: <client name> Studio Database Client_<40-character alphanumeric string>_<40-character alphanumeric string>.pem, for example Client1 Studio Database Client_CC1727A4663763D3FEBDD486B9F44706A7EF4307_52B0188BBD56D07475B29FE30C4017AF4A7D9052.pem

• A client certificate KEY file syntax is: <client name> Studio Database Client_<40-character alphanumeric string>_<40-character alphanumeric string>.key, for example Client1 Studio Database Client_CC1727A4663763D3FEBDD486B9F44706A7EF4307_52B0188BBD56D07475B29FE30C4017AF4A7D9052.key

• One or more gateway certificate PEM files, one for each gateway host that connects to the particular client target station. The gateway certificate PEM file syntax is: <gateway machine name> Studio Database Gateway_<40-character alphanumeric string>_<40-character alphanumeric string>.pem, for example MACHINE1 Studio Database Gateway_0E4C8FADABB8C0AD1692EFB9D18C628D3759884C_52B0188BBD56D07475B29FE30C4017AF4A7D9052.pem

Follow these steps:

1. Have available the certificate authority (CA), database gateway certificates, and client certificate. Rename the files if necessary.

2. Copy the files to the target station. The entire certificates folder can be copied to the target station, but only the files mentioned above are needed.

3. In the runtime directory, using sudo, run install.sh followed by the -s switch, and the path to the file in quotes, for example:

   $ sudo ./install.sh -s "certificates/Client1 Studio Database Client_<CC1727A4663763D3FEBDD486B9F44706A7EF4307>_<52B0188BBD56D07475B29FE30C4017AF4A7D9052>.pem"

   The -s parameter takes the client certificate PEM file. The script finds the KEY file in the same folder. The folder must also contain RootCA_<thumbprint>.pem and at least one <name> Studio Database Gateway_*.pem file.

4. Repeat the previous step for each of the files.

5. For security reasons, you may delete these copied certificate files (or the folder) after they have been installed.