CmdID

CmdID / aws / aws iot

aws iot register-ca-certificate

Registers a CA certificate with Amazon Web Services IoT Core. AWS CLI reference

1 example 7 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Examples

from aws-cli, each command read by CmdID

To register a certificate authority (CA) certificate

The following register-ca-certificate example registers a CA certificate. The command supplies the CA certificate and a key verification certificate that proves you own the private key associated with the CA certificate.

aws iot register-ca-certificate --ca-certificate file://rootCA.pem --verification-certificate file://verificationCert.pemIdentify
--ca-certificateThe CA certificate.
--verification-certificateThe private key verification certificate.

Contents of rootCA.pem:

-----BEGIN CERTIFICATE-----
MIIDWTCCAkGgAwIBAgIUEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEwDQYJKoZI
hvcNAQELBQAwTDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAO
...
EXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLE==
-----END CERTIFICATE-----

Contents of verificationCert.pem:

-----BEGIN CERTIFICATE-----
MIIDWTCCAkGgAwIBAgIUEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEwDQYJKoZI
hvcNAQELBQAwTDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAO
...
EXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLE==
-----END CERTIFICATE-----
Its output
{
    "certificateArn": "arn:aws:iot:us-west-2:123456789012:cacert/f4efed62c0142f16af278166f61962501165c4f0536295207426460058cd1467",
    "certificateId": "f4efed62c0142f16af278166f61962501165c4f0536295207426460058cd1467"
}

For more information, see Register your CA certificate in the AWS IoT Core Developer Guide.

Options

7 in the AWS CLI reference
--allow-auto-registrationAllows this CA certificate to be used for auto registration of device certificates.
--ca-certificateThe CA certificate.
--certificate-modeDescribes the certificate mode in which the Certificate Authority (CA) will be registered.
--registration-configInformation about the registration configuration.
--set-as-activeA boolean value that specifies if the CA certificate is set to active.
--tagsMetadata which can be used to manage the CA certificate.
--verification-certificateThe private key verification certificate.