X.509 Certificate Manager
The X.509 Certificate Manager is neXo’s precompiled library nXPicoX509 — install it first, see Library › Installing the libraries (download).
It stores the certificates and private keys used to establish TLS connections from ST — most importantly, the broker CA certificate and the client certificate/key pair needed for MQTTS.
What it manages
Section titled “What it manages”| Credential | Purpose |
|---|---|
| Root / CA certificate | Verify the identity of the remote server (e.g. an MQTT broker) |
| Client certificate | Identify this device to the remote server (mutual TLS) |
| Client private key | Paired with the client certificate |
[Da completare: function block/metodi esatti della libreria (import, list, delete), formato di storage (PEM/DER), limiti di dimensione o numero di credenziali]
See MQTT / MQTTS for how these credentials are referenced when opening a secure connection.