使用AWS re:Post即您表示您同意 AWS re:Post 使用条款
AWS re:Postre:Post

Certificate validity

0

Hi, Currently AWS MQTT connection is established using below link: https://docs.aws.amazon.com/freertos/latest/userguide/getting_started_espressif.html I can see the certificate expiry is in 2050 year through AWS console. I wanted to know:

  1. Can this expiry period be changed to 2060 or 2040 or any other?
  2. How to automate expiry check monitoring
  3. How to renew certificates? Are new certificates required to be replaced? Please guide.
主题
物联网 (IoT)
标签
AWS IoT Core
语言
English
AWS-User-4935529
已提问 2 年前1073 查看次数
1 回答
0

Hi.

  1. For a different expiry, you can't use AWS IoT to generate your certificates. You'll need your own CA. You can use ACM Private CA or your own PKI.
  2. One way to automate expiry check is with AWS IoT Device Defender: https://docs.aws.amazon.com/iot/latest/developerguide/audit-chk-device-cert-approaching-expiration.html
  3. Certificate rotation using AWS IoT Device Defender and AWS IoT Jobs: https://aws.amazon.com/blogs/iot/how-to-manage-iot-device-certificate-rotation-using-aws-iot/
profile pictureAWS
专家
Greg_B
已回答 2 年前
  • AWS-User-4935529
    2 年前

    Hi Greg, Thanks for info. This is helpful in clearing doubts. The currently used AWS certificate created in 2022 (this year) is showing expiry of 2050. Is default expiry year: 28 years + created year? Please guide.

  • Greg_B 专家
    2 年前

    No. Expiry is always Dec 31 2049. It doesn't matter when the certificate is created: https://docs.aws.amazon.com/iot/latest/developerguide/x509-client-certs.html

    X.509 certificates generated by AWS IoT expire at midnight UTC on December 31, 2049 (2049-12-31T23:59:59Z).

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈，并能促进提问者的职业发展。

回答问题的准则

相关内容