Completing an empty MQTT broker profile

An MQTT broker profile is empty if it was created from the None template and has not yet been completed. The settings of an empty profile do not show any configuration files or certificates.

To complete an empty MQTT broker profile:

1. In the menu in the left part of the web interface page, select the Network section and then the MQTT broker tab.

   This opens a table that lists the MQTT broker profiles.

2. In the Name column, click the  icon next to the profile that you want to complete.

   The Profile settings table will be displayed.

3. Add a security certificate to the MQTT broker profile by clicking Upload in the lower part of the page. In the file upload window that opens, select a certificate file in CER, CRT, PEM, or DER format. The file size must not exceed 131 KB.

   The certificate file will be uploaded to the system and will appear in the MQTT broker profile settings.

   An MQTT broker profile requires multiple security certificates, such as a certificate issued by a Certificate Authority, a server client certificate, and a private key file. Depending on the requirements of the MQTT server, the server client certificate and private key file must be signed with a valid certificate issued by a certification authority. If your profile prescribes the use of SSL/TLS, repeat this step as many times as required to upload all required certificates to the system. A secure connection is not guaranteed in the absence of security certificates.

   We do not recommend uploading more than three security certificate files per MQTT profile. If more than three files are uploaded, only the last uploaded certificate files will be used.

4. Create a configuration file in the MQTT broker profile by clicking the Create new file button.

   The Create MQTT broker configuration file pane opens on the right.

5. In the Name field, enter the name of the configuration file using letters of the English alphabet.
6. Click Save to save the Eclipse Mosquitto MQTT broker configuration file.

   The Create MQTT broker configuration file pane closes. A configuration file will be created. You can create only one configuration file.

   You can create only one configuration file. If it needs to be replaced, you need to delete the active configuration file and then re-create it. You can only set an MQTT profile as active if it has a configuration file added.

7. In the Profile settings table, click the name of the configuration file that was just created.
8. In the lower part of the Edit MQTT broker configuration file pane that opens on the right, click the  icon.

   This opens a text editor window for editing the configuration file.

9. In the text editor window, enter the required settings of the Eclipse Mosquitto MQTT broker configuration file.

   For detailed information on the settings of the Eclipse Mosquitto MQTT broker configuration file, please refer to the documentation on the developer's website. There are limitations when configuring the MQTT broker for Kaspersky IoT Secure Gateway 1000.

10. If you need to add a prepared configuration file to the profile, click the Upload button in the lower part of the page. In the opened file upload window, select a file in CONF format.

    The configuration file will be uploaded to the system and will appear in the MQTT broker profile settings.

11. Click Save in the lower part of the page to save the changes.