IoT device firmware development guideline?

Hi Rich,

After some trying to understand, I am left with some question.

At Certificate Generation it is described on how to create a certificate, and make it work in three steps. Step one I managed to do based on this link:

But step 2 and 3 are not really clear to me.

  1. The certificate should then be signed by an intermediate CA.

Is this that we should sign our CA certificate to an approved organization? Or is it also possible to do it our self/ make use Certbot?

  1. The intermediate CA certificate is then uploaded into OpenRemote within a Realm config instance

This upload I expected to be at the Provisioning configurations in the CA Certificate (PEM), or should this upload be done in Keycloak?

Thanks again