CmdID

CmdID / aws / aws iot

aws iot register-certificate

Registers a device certificate with IoT in the same certificate mode as the signing CA. AWS CLI reference

1 example 4 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Examples

from aws-cli, each command read by CmdID

To register a self signed device certificate

The following register-certificate example registers the deviceCert.pem device certificate signed by the rootCA.pem CA certificate. The CA certificate must be registered before you use it to register a self-signed device certificate. The self-signed certificate must be signed by the same CA certificate you pass to this command.

aws iot register-certificate --certificate-pem file://deviceCert.pem --ca-certificate-pem file://rootCA.pemIdentify
--certificate-pemThe certificate data, in PEM format.
--ca-certificate-pemThe CA certificate used to sign the device certificate being registered.

Contents of deviceCert.pem:

-----BEGIN CERTIFICATE-----
MIIDWTCCAkGgAwIBAgIUEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEwDQYJKoZI
hvcNAQELBQAwTDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAO
...
EXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLE==
-----END CERTIFICATE-----

Contents of rootCA.pem:

-----BEGIN CERTIFICATE-----
MIIDWTCCAkGgAwIBAgIUEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEwDQYJKoZI
hvcNAQELBQAwTDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAO
...
EXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLEEXAMPLE==
-----END CERTIFICATE-----
Its output
{
    "certificateArn": "arn:aws:iot:us-west-2:123456789012:cert/488b6a7f2acdeb00a77384e63c4e40b18b1b3caaae57b7272ba44c45e3448142",
    "certificateId": "488b6a7f2acdeb00a77384e63c4e40b18b1b3caaae57b7272ba44c45e3448142"
}

For more information, see Register a client certificate manually in the AWS IoT Core Developer Guide.

Options

4 in the AWS CLI reference
--ca-certificate-pemThe CA certificate used to sign the device certificate being registered.
--certificate-pemThe certificate data, in PEM format.
--set-as-activeA boolean value that specifies if the certificate is set to active.
--statusThe status of the register certificate request.