IoT security: Using single certification across all devices?


In IoT Core, it is strongly suggested to use a uniq certificate per device. Is using same cert across many devices less secure? Or simply loosing functionalities like Shadow, etc?

asked 2 years ago489 views
1 Answer


there are several reasons why to use a unique certificate per device. When you deploy for example 1 million devices and your certificate is being compromised you must exchange the certificate on all devices. When you deactivate the certificate all devices which share a certificate are affected.

If you use one unique device per certificate you only need to exchange the certificate on one device. You can also deactivate such a certificate without impacting other devices.

When you attach IoT policies to a certificate, all devices will share the same permissions when they share a certificate. This can prevent you from using IoT policies that conform to the least privilege principle.

The shadow service is unrelated to the certificate you use. Your device logic defines which shadow name in classic or named shadow you are going to use.



answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions