Certificates & Device Setup
Generate and download the certificates needed to connect your device to the intelliThings platform via MQTTS.
To connect a device securely to the intelliThings platform, you need client certificates. These certificates prove your device's identity to the broker and enable encrypted communication.
This article explains how to generate, download, and configure certificates for your device.
Step 1: Create a Device in the Device Template
Certificates are tied to a specific device. You must first create a device in the Device Template section of the Dashboard.
- Open the Dashboard and navigate to the Device Template section.
- Click Add Device (or select an existing device to re-download its certificates).
- Set a serial number for the device. This serial number is critical — it will be used in the MQTT topic placeholders (see Broker Connection for details).
- Save the device.
Step 2: Certificate Generation
As soon as you create a device, a set of certificates is automatically generated:
- A device certificate (PEM format)
- A device private key (PEM format)
These certificates are linked to your device's serial number and tenant. They allow your device to publish to and subscribe from its dedicated topics on the platform.
Step 3: Download Certificates
Automatic Download
In most cases, the certificates are automatically downloaded to your browser as soon as they are generated. Check your downloads folder for the PEM files.
Manual Download
If automatic download did not occur, or if you need to re-download the certificates at any time:
- Open the device you created in the Device Template section.
- Find the Certificates area for that device.
- Click the Download button.
The certificates are available for download at any time — there is no limit to how many times you can download them.
Certificate Details
| Property | Value |
|---|---|
| Format | PEM (certificate + key) |
| Root CA expiration | January 17, 2076 |
| Device certificate expiration | Does not expire independently |
| Regeneration limit | None — download anytime |
Step 4: Configure Your Device
Once you have the certificate files, configure your device to connect using MQTTS:
- Broker address: Enter
broker2.mqtt.intellithings.io - Port: Enter
8883 - TLS/SSL: Enable TLS encryption
- Client certificate: Load the downloaded device certificate (PEM file)
- Client key: Load the downloaded device private key (PEM file)
- MQTT version: Set to
3.1.1 - Topic configuration: Use your tenant slug and device serial number in the topic paths (see Broker Connection)
Security Note
Certificates are tied to a specific device and serial number. Each certificate is only allowed to publish and subscribe to its own device's topics. This prevents cross-access to other devices on the platform. Exceptions can be configured in the Policy Editor (covered in a separate article).
Never share your certificate files with unauthorized parties. Treat them like passwords — they are the key to proving your device's identity on the platform.