Skip to content

Commit

Permalink
(Setting up your PKI): Clarify command usage
Browse files Browse the repository at this point in the history
  • Loading branch information
camilamacedo86 authored and kprosise committed Sep 26, 2023
1 parent 056775d commit 52b79e1
Showing 1 changed file with 11 additions and 4 deletions.
15 changes: 11 additions & 4 deletions source/reference-manual/security/device-gateway.rst
Original file line number Diff line number Diff line change
Expand Up @@ -66,17 +66,24 @@ Setting up your PKI
-------------------

:ref:`ref-fioctl` includes a sub-command to set this up:
``fioctl keys ca create /absolute/path/to/certs/``. A few important things to
note about this command:

.. code-block::
fioctl keys ca create /absolute/path/to/certs/
A few important things to note about this command:

* It's highly recommend that you use a PKCS#11 compatible HSM. This
will ensure the safety of your factory's root of trust private key.

* The "PKI Directory" is important and should be securely backed
up.

You can view the configured certificates with
``fioctl keys ca show --pretty``.
After running the above command, you can validate the outcome and view the configured certificates by using the following command:

.. code-block::
fioctl keys ca show --pretty
The Factory PKI is interwoven with Device Manufacturing Process and Device Registration,
you can find out more details on this topic in this guide :ref:`ref-factory-registration-ref`.
Expand Down

0 comments on commit 52b79e1

Please sign in to comment.