Skip to content

Commit d437d32

Browse files
Merge pull request #312204 from seeamislam/docs-editor/iot-hub-certificate-management-1771956432
Update iot-hub-certificate-management-overview.md
2 parents 182fb84 + 4e15b1d commit d437d32

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

articles/iot-hub/iot-hub-certificate-management-overview.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,8 @@ Certificate management uses [Azure Device Registry (ADR)](iot-hub-device-registr
6262
The following image illustrates the X.509 certificate hierarchy used to authenticate IoT devices in Azure IoT Hub through the ADR namespace.
6363

6464
- Each ADR namespace that has an enabled certificate management will have a unique credential (root CA) managed by Microsoft. This credential represents the top-most certificate authority in the chain.
65-
- Each policy within the ADR namespace defines one issuing CA (ICA) that is signed by the root CA. Each policy can only share its CA certificate with Hubs linked to the namespace. And, each policy can only issue leaf certificates to devices registered within that namespace. You can configure the validity period of the issued certificates for each policy. The minimum validity period is 1 day and the maximum validity period is 90 days.
65+
- Each policy within the ADR namespace defines one issuing CA (ICA) that is signed by the root CA. Each policy can only share its CA certificate with Hubs linked to the namespace. And, each policy can only issue leaf certificates to devices registered within that namespace. You can configure the validity period of the issued certificates for each policy. The minimum validity period is 7 day and the maximum validity period is 90 days.
66+
6667
- Once you have created your credential and policies, you can sync these CA certificates directly with IoT Hub. IoT Hub will now be able to authenticate devices that present this certificate chain.
6768

6869
:::image type="content" source="media/certificate-management/device-registry-certificate-management.png" alt-text="Diagram showing how Azure Device Registry integrates with IoT Hub and DPS for certificate management." lightbox="media/certificate-management/device-registry-certificate-management.png":::

0 commit comments

Comments
 (0)