Modifying an MQTT broker profile

You can change the name and settings of an MQTT broker profile.

Kaspersky IoT Secure Gateway 1000 does not let you change the predefined MQTT broker profile.

For a profile currently set as active, you can edit the name only. If you need to change active profile settings, you have to switch to a different MQTT broker profile first.

To change the name of an MQTT broker profile:

1. In the menu in the left part of the web interface page, select the Network section and then the MQTT broker tab.

   This opens a table that lists the MQTT broker profiles.

2. In the Name column, click the name of the profile that you want to edit.

   The Edit MQTT broker profile pane opens on the right.

3. In the Name field, enter a new profile name.
4. Click Save in the lower part of the page to save the changes.

The modified MQTT broker profile will appear in the Profiles table.

To change the settings of the MQTT broker profile:

1. In the menu in the left part of the web interface page, select the Network section and then the MQTT broker tab.

   This opens a table that lists the MQTT broker profiles.

2. In the Name column, click the  icon next to the profile that you want to edit.

   This opens the Profile settings table containing a list of configuration files and certificates that are part of the MQTT broker profile. If the profile was created based on the None template, the list of files will be empty. An empty profile must be completed.

   If the profile is active or predefined, you cannot edit its settings. For an active profile, you can edit the name only.

3. If you need to add a prepared configuration file to the profile, click the Upload button in the lower part of the page. In the opened file upload window, select a file in CONF format.

   The configuration file will be uploaded to the system and will appear in the MQTT broker profile settings.

4. If you need to change the name of the configuration file, click the name of the configuration file and in the Edit MQTT broker configuration file pane that opens on the right, provide a new name in the Name field and click Save.
5. If you need to edit a configuration file in the MQTT broker profile, click the name of the configuration file that you want to edit and do the following in the Edit MQTT broker configuration file pane that opens on the right:
   1. Click the  icon in the lower part of the pane.
   2. In the opened text editor window, change the settings as required.

      For detailed information on the settings of the Eclipse Mosquitto configuration file, please refer to the documentation on the developer's website. There are limitations when configuring the MQTT broker profile for Kaspersky IoT Secure Gateway 1000.

   3. Click Save in the lower part of the page to save the changes.

      The selected configuration file will be changed. The text editor window closes.

6. If you need to delete a configuration file from the MQTT broker profile, click the name of the configuration file and click the  icon located in the lower part of the Edit MQTT broker configuration file pane that opens on the right. Confirm file deletion.

   The selected configuration file will be deleted from the MQTT broker profile settings.

7. If you need to add a security certificate to the MQTT broker profile, click Upload in the lower part of the page. In the file upload window that opens, select a certificate file in CER, CRT, PEM, or DER format. The file size must not exceed 131 KB.

   The certificate file will be uploaded to the system and will appear in the MQTT broker profile settings.

   An MQTT broker profile requires multiple security certificates, such as a certificate issued by a Certificate Authority, a server client certificate, and a private key file. Depending on the requirements of the MQTT server, the server client certificate and private key file must be signed with a valid certificate issued by a certification authority. If your profile prescribes the use of SSL/TLS, repeat this step as many times as required to upload all required certificates to the system. A secure connection is not guaranteed in the absence of security certificates.

   We do not recommend uploading more than three security certificate files per MQTT profile. If more than three files are uploaded, only the last uploaded certificate files will be used.

8. If you need to remove a security certificate from the profile, click the name of this certificate in the Profile settings table and click the  icon in the pane that opens on the right. Confirm certificate removal.

   The selected security certificate file will be deleted from the MQTT broker profile settings.