Adding application certificates

For the applications installed in Kaspersky IoT Secure Gateway 1000, you can add a full set of certificates, including the certification authority certificate and the client certificate, or only one of these certificates. A key must also be added for the client certificate.

To add a new certification authority certificate for an application:

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the device running Kaspersky IoT Secure Gateway 1000. If the device name is not on the list, add it to the Managed devices group.
3. In the device properties window that opens, select the Applications tab.
4. Press Kaspersky IoT Secure Gateway.

   This opens a window containing information about Kaspersky IoT Secure Gateway 1000.

5. Select the Application settings tab.
6. Select Settings of apps → Certificates.
7. In the Certification Authority certificate block, click the Upload certificate button and select the certificate file in the opened window. Only files in CRT, CER, DER or PEM format can be uploaded.

   The certificate file will be uploaded, and information about this certificate will be displayed on the page.

8. Click the Save button in the lower part of the page.

After synchronization between Kaspersky IoT Secure Gateway 1000 and Kaspersky Security Center, the certification authority certificate is also added to Kaspersky IoT Secure Gateway 1000. The installed application for which the certification authority certificate is issued uses the downloaded certificate.

To add a new client certificate for an application and a key for the certificate:

1. In the main window of the Web Console, select Devices → Managed devices.
2. Click the name of the device running Kaspersky IoT Secure Gateway 1000. If the device name is not on the list, add it to the Managed devices group.
3. In the device properties window that opens, select the Applications tab.
4. Press Kaspersky IoT Secure Gateway.

   This opens a window containing information about Kaspersky IoT Secure Gateway 1000.

5. Select the Application settings tab.
6. Select Settings of apps → Certificates.
7. In the Client certificate block:
   • Click the Upload certificate button and select the certificate file in the opened window. Only files in CRT, CER, DER or PEM format can be uploaded.
   • Click the Upload key button and select the key file in the opened window. Only key files in KEY format can be uploaded.

   Certificate files and their keys will be uploaded, and information about them will be displayed on the page.

8. Click the Save button in the lower part of the page.

   It is not possible to save changes if you have uploaded only the client certificate or only the key. Both files (the certificate and the key) must be uploaded to continue.

After synchronization between Kaspersky IoT Secure Gateway 1000 and Kaspersky Security Center, the client certificate and the key are also added to Kaspersky IoT Secure Gateway 1000. The installed application for which the client certificate is issued uses the downloaded certificate and the key.