Migrating RSA key storage location from 4.13 to 4.14

The following section outlines the process for migrating RSA key storage when you upgrade from Niagara 4.13 to Niagara 4.14.

In Niagara 4.13, the abstract MQTT driver manages RSA keys as follows:

  • The RSA private key is saved in the Password property.

  • The public key is located in the file: <station_home>\shared\JwtKeys\<Abstract MQTT Driver Network>\<Abstract MQTT Device>.pem

When you upgrade to Niagara 4.14.u1 or Niagara 4.15, the RSA keys are automatically migrated to the Niagara keystore as self-signed certificates with the following characteristics:

  • Certificate Alias: This is set as the device name.

  • If a certificate alias with the same name already exists in the keystore, the system appends the next available number to the alias. For example, if the device name is "device"*, and there is already a certificate with the alias "device", the new self-signed migrated certificate will have the alias "device1".

After the successful migration of the RSA keys, the configuration settings for the AbstractMQTTDevice will be updated as follows:

  • The AbstractMqttDevice > GcpAuthenticator > Token Parameter > Certificate > Certificate Alias And Password property is set to the device name.

  • The RSA private key in the Password property is reset to its default setting.