Configure TrustEdge

TrustEdge uses several configuration files to manage its settings and credentials. Understanding these files allows you to customize TrustEdge according to your needs.

• trustedge.json: Main configuration file defining directory paths, proxy settings, TrustEdge agent behavior, and logging.
• bootstrap_config.json: Provides TrustEdge agent with Device Trust Manager endpoints and credentials.

trustedge.json

• Location: /etc/digicert/trustedge.json
• Purpose: Defines key configuration settings used by TrustEdge.

Example content:

{
    "directory_paths": {
        "bin_dir": "/usr/bin",
        "lib_dir": "/usr/lib",
        "conf_dir": "/etc/digicert/conf",
        "keystore_dir": "/etc/digicert/keystore"
    },
    "proxy": {
        "url": null
    },
    "agent": {
       "bootstrap":"<path>/bootstrap_config.json",
       "workspace_dir":"<path>",
       "connection_uptime_interval": 360,
       "keepalive_interval": 30,
       "sleep_interval": 18000,
       "action_handler_timeout": 120,
       "enforce_token": false,
       "log_payload": true,
       "policy_timestamp_window": 10,
       "max_retry_count": 7,
       "chunk_supported":true,
       "chunk_size": 131072,
       "chunk_window_size": 4
    },
    "certificate": {
        "service_dir": "/etc/digicert/service",
        "polling_interval": "1",
        "renewal_hours": "360",
        "mode": "scep"
    },
    "service": {
        "mode": "certificate"
    },
    "api": {
        "mode": "https",
        "port": 8443,
        "num_process": 5,
        "num_resource": 5,
        "server_keycert_alias": "te-api-server",
        "server_hostname": "localhost"
    },
    "cloud_provider":{
        "provider_creds_dir":"/etc/digicert/cloudprovider"
    },
    "log": {
        "loglevel": "ERROR|WARNING|DEBUG|INFO|VERBOSE"
    }
}

bootstrap_config.json

• Location: /etc/digicert/conf/bootstrap_config.json
• Purpose: Provides the agent with Device Trust Manager MQTT endpoints and credentials.

Example content:

{
  "configuration": {
    "device_id": "<device_id>",
    "account_id": "<account_id>",
    "division_id": "<division_id>",
    "device_group_id": "<device_group_id>",
    "rendezvous_configuration": {
      "mqtt_endpoint": {
        "primary": ["mqtt://demo.one.digicert.com:1883"]
      },
      "persist_connection": false
    },
    "system_attributes": [
      { "key": "location" },
      { "key": "hardware_model" },
      { "key": "serial_number" },
      { "key": "operating_system" },
      { "key": "firmware_version" },
      { "key": "mac_address" },
      { "key": "ip_address" }
    ],
    "authentication": [
      {
        "method": "x509",
        "key_source": "SW",
        "certificate_serial_number": "111111111111111111",
        "certificate_issuer": "RSA 2048 ICA",
        "cert_alias": "device1.crt",
        "key_alias": "device1-key.crt"
      }
    ]
  }
}