How to check certificates in OnBoard™ IoT Security

This article will guide you through the following operations in OnBoard™ IoT Security (OBIS):

• Check basic information
• Check usage count
• Check verification service
• Check end-entity certificate
• Check audit
• Check members

Prerequisites

Before getting started, please ensure that you have permissions for the corresponding certificate.

Check basic information

1. Sign in to OBIS.

2. In the Core section of the left menu, click PKI. Expand the corresponding certificate chain, and then select the corresponding certificate.

   tip

   Click the Filter , Sort , Refresh , and Columns Options icons to filter, sort, refresh data, and to customize which columns are shown and how they are ordered.

   

3. On the Overview tab, you can check the certificate-related information (Basic Details, Certificate Information, and Extension).

   

Check usage count

tip

Certificate usage count can be used to check certificate dependencies and impact scope.

1. Sign in to OBIS.

2. In the Core section of the left menu, click PKI. Expand the corresponding certificate chain, and then select the corresponding certificate.

   

3. Select the Usage tab, you can check the usage count (such as Usage Count, First Used, and Last Used) for certificates used by users and products.

   tip

   Click the Filter , Sort , Refresh , and Columns Options icons to filter, sort, refresh data, and to customize which columns are shown and how they are ordered.

   

Check verification service

tip

The Verification Services tab is displayed only for system-generated intermediate certificates (PAI, Manufacturer, Model, and Sub Cert certificates).

1. Sign in to OBIS.

2. In the Core section of the left menu, click PKI. Expand the corresponding certificate chain, and then select the corresponding certificate.

   

3. Select the Verification Services tab, you can check the verification service information (such as CRL, OSCP, and CA Issuers).

   

Check end-entity certificate

tip

The end-entity certificate displays all end-entity certificates issued from the template, providing visibility into the template's actual issuance status.

1. Sign in to OBIS.

2. In the Core section of the left menu, click PKI. Expand the corresponding certificate chain, and then select the corresponding certificate template (DAC Template, Device Template, and Leaf Template).

   

3. Select the End-Entity Certificate tab, you can check the relevant end-entity certificate information (such as Serial Number, Subject CN, Not Before, and Not After).

   tip

   Click the Filter , Sort , Refresh , and Columns Options icons to filter, sort, refresh data, and to customize which columns are shown and how they are ordered.

   

Check audit

tip

Through the certificate logs, you can check the historical operations of the certificate.

1. Sign in to OBIS.

2. In the Core section of the left menu, click PKI. Expand the corresponding certificate chain, and then select the corresponding certificate.

   

3. Select the Audit tab, you can check the certificate's historical records (such as Operator, Operation Type, and Operation Time).

   tip

   Click the Filter , Sort , Refresh , and Columns Options icons to filter, sort, refresh data, and to customize which columns are shown and how they are ordered.

   

Check members

1. Sign in to OBIS.

2. In the Core section of the left menu, click PKI. Expand the corresponding certificate chain, and then select the corresponding certificate.

   

3. Select the Member tab , you can check the user permissions for the certificate (such as Name, Role, and Permission).

   tip

   Click the Filter , Sort , Refresh , and Columns Options icons to filter, sort, refresh data, and to customize which columns are shown and how they are ordered.