Certificates

Device certificates authenticate connections through mutual TLS (mTLS). Nexigon Agent generates a self-signed certificate by default. You can also provide certificates from your own certificate authority.

Manage certificates through the web interface or API. See Device Authentication for the complete identity model.

Certificate States

Each device certificate has a status that can be one of the following:

• Pending: The certificate has been created but not yet accepted.
• Active: The certificate has been accepted and can be used to authenticate.
• Rejected: The certificate has been rejected.
• Revoked: The certificate has been revoked.

Devices can only establish a connection by presenting an active device certificate.