diff --git a/content/en/docs/deployment/device-provisioning-service/troubleshooting.md b/content/en/docs/deployment/device-provisioning-service/troubleshooting.md index 5480eb56..74526249 100644 --- a/content/en/docs/deployment/device-provisioning-service/troubleshooting.md +++ b/content/en/docs/deployment/device-provisioning-service/troubleshooting.md @@ -82,5 +82,5 @@ If your device is unable to connect to the Hub, follow these steps: If your device can connect to the DPS service but is unable to retrieve certificates from the certificate authority or obtain an authorization code due to lack of trust, follow these steps: -- For the certificate authority, you need to append the certificate authority for that endpoint to the `global.authorizationCAPool` and set `deviceProvisioningService.enrollmentGroups[].hub.certificateAuthority.grpc.tls.caPool` to `/certs/extra/ca.crt` as described in the [Customize client certificates for DPS](/docs/deployment/device-provisioning-service/advanced#customize-client-certificates-for-dps) section. Alternatively, you can create an extra volume, mount it, and set the `deviceProvisioningService.enrollmentGroups[].hub.certificateAuthority.grpc.tls.caPool` field to the CA in that volume. +- For the certificate authority, you need to append the certificate authority for that endpoint to the `global.extraCAPool.authorization` and set `deviceProvisioningService.enrollmentGroups[].hub.certificateAuthority.grpc.tls.caPool` to `/certs/extra/ca.crt` as described in the [Customize client certificates for DPS](/docs/deployment/device-provisioning-service/advanced#customize-client-certificates-for-dps) section. Alternatively, you can create an extra volume, mount it, and set the `deviceProvisioningService.enrollmentGroups[].hub.certificateAuthority.grpc.tls.caPool` field to the CA in that volume. - For the authorization provider, follow similar steps as for the certificate authority, but set `enrollmentGroups.[].hub.authorization.provider.http.tls.caPool`. diff --git a/content/en/docs/deployment/hub/advanced.md b/content/en/docs/deployment/hub/advanced.md index bb5bfeef..658ad26f 100644 --- a/content/en/docs/deployment/hub/advanced.md +++ b/content/en/docs/deployment/hub/advanced.md @@ -47,11 +47,12 @@ used by plgd hub services. For including custom authorization CA pool into autho ```yaml global: - # -- Custom CA certificate for authorization endpoint in PEM format - authorizationCAPool: |- - -----BEGIN CERTIFICATE----- - your custom authorization CA pool in PEM format - -----END CERTIFICATE----- + extraCAPool: + # -- Custom CA certificate for authorization endpoint in PEM format + authorization: |- + -----BEGIN CERTIFICATE----- + your custom authorization CA pool in PEM format + -----END CERTIFICATE----- ``` {{< warning >}}