Disclaimer: Your use of these services, products, and software is limited to non-commercial use cases only, which includes usage for evaluation purposes prior to purchase. Commercial usage in a production environment requires the purchase of an associated entitlement.
TrustEdge is a standalone executable that can run as both an agent for devices managed through DigiCert® Device Trust Manager or as a standalone command line tool for performing common security tasks on a device, such as generating keys and submitting a certificate signing request (CSR) to a certificate authority (CA). TrustEdge is built using DigiCert® TrustCore SDK.
When run in agent mode, TrustEdge acts as a client to DigiCert® Device Trust Manager. It runs as daemon (Linux) on an IoT device and uses MQTT for all communications between the device and Device Trust Manager.
TrustEdge agent can:
- Authenticate a device with Device Trust Manager using bootstrap credentials such as an x.509 "birth" certificate.
- Interface with secure hardware elements on a device, such as a TPM or TEE.
- Exchange bootstrap credentials for an "operational" x.509 certificate for accessing cloud services such as an MQTT broker running in the cloud.
- Renew an operational certificate.
- Manage device updates and configurations.
- Report device properties directly to Device Trust Manager. For example, IP address, MAC address, or location.
TrustEdge can also run as a standalone command line interface (CLI) tool without the need for Device Trust Manager. TrustEdge command line is useful for prototyping and accelerating an IoT pilot or proof of concept. You can use it to perform common security tasks on an IoT device.
TrustEdge command line can:
- Generate keys. For example, RSA or ECDSA.
- Create a CSR.
- Submit a CSR to a CA and obtain a certificate.
- Renew a certificate.
- Communicate with an MQTT broker over TLS using x.509 authentication.
Rather than learning and using multiple OSS tools to accomplish the above tasks, TrustEdge command line brings all these capabilties into one easy-to-use tool.
TrustEdge is free to download and use for non-commercial purposes, including pilots and proof of concepts. Commercial use requires the purchase of a Device Trust Manager subscription. See LICENSE.md for additional license information.
TrustEdge documentation is available at https://dev.digicert.com/en/trustedge.html.
Device Trust Manager customers with an active support contract can contact DigiCert Support at https://www.digicert.com/support/pki-support.
If you do not have an active support contract, you can provide feedback by creating an issue.