Options to create alarm if device certificate(thin-edge) is about to expire

Forum
,
1

Hi,

What are the considerations for implementing either of these solutions for the following use case?

  • thin-edge uses : X509 certificates, that expire after X months.

  • Renewal window: The certificate must be renewed Y days before its expiration date. If this renewal does not happen, an alarm must be generated.

  • Failure handling: The renewal may fail under certain circumstances (e.g., if the device is offline for an extended period).

Proposed Solution A: Use an Apama Streaming Analytics rule that checks once a day to see if any certificate is reaching its renewal threshold and generates an alarm.

Proposed Solution B: Use a rule defined directly in thin-edge that is evaluated once a day.

Regards Christof

2

There is actually a pre-defined flow doing exactly that:

It runs locally and triggers an alarm in C8Y when reaches the tresholds which are configurable via Parameter Management.