Overview of PKI in OnBoard™ IoT Security

PKI (Public Key Infrastructure) in OBIS (OnBoard™ IoT Security) is the core module responsible for certificate security, which provides certificate generation, issuance, and revocation services to ensure secure communication for IoT devices. It is mainly used for:

• Pre-provisioning certificate templates for devices in bulk.
• Using command-line tools to issue end-entity templates.
• Using command-line tools to verify the validity of certificates and certificate chains.

In addition, OBIS provides certificate templates for the Matter protocol, enabling rapid generation of corresponding certificate chains. The following table summarizes the core capabilities of PKI:

Capability	Description
CA Hierarchy Management	Root CA and Intermediate CA hierarchy management Certificate chain validation and trust path verification
Certificate Lifecycle	Certificate issuance, renewal, and revocation Certificate templates and policy management Certificate validity and status monitoring
External PKI Integration (Root CA Delegation)	OEM retains Root CA ownership in enterprise PKI PKI operates issuing CAs under delegated authority