The steps here would generally not be required. However, if you want to explicitly create a new CA certificate and use it for signing the device certificates, you can use this command.

Usage:

python rainmaker_admin_cli.py certs cacert generate --outdir <outdir>

This will generate the CA key and certificate at following locations:

• <outdir>/<current_date>/Mfg-<no>/common/ca.key
• <outdir>/<current_date>/Mfg-<no>/common/ca.crt

These can be used for signing the device certificates by passing these via the --cacertfile and --cakeyfile options for rainmaker_admin_cli.py certs devicecert generate