Complete a 3 Question Survey and Earn a re:Post Badge

Help improve AWS Support Official channel in re:Post and share your experience - complete a quick three-question survey to earn a re:Post badge!

Is it possible to register CA with AWS IoT Core without having access to Private Key ?

Let's say we are getting our device certificates signed by 3rd party CA e.g digicert. Can we register this 3rd party CA on AWS IoT Core for JITP without having access to Private Key ? As the registration process requires the proof of ownership. [https://aws.amazon.com/about-aws/whats-new/2022/07/aws-iot-core-provision-iot-devices-aws-accounts-registrations-certificate-authorities/](This Blog) seems to suggest that it's possible but did not find details anywhere on the workflow.

Topics

Tags

Language

English

asked 2 years ago703 views

1 Answer

Hi Ravi,

you can register a CA without having access to the private key in SNI_ONLY mode: https://docs.aws.amazon.com/iot/latest/developerguide/register-CA-cert.html

Cheers,
Philipp

EXPERT

answered 2 years ago

Ravi Trivedi
2 years ago
Ok, In this case does device need to send SNI in the TLS handshake? or its is applicable only when the device cert ( Not CA cert ) is registered as SNI_ONLY ?

Relevant content