From the authentication's point of view, device certificate authentication is basically Client Certificate Authentication.
Client Certificate Authentication is a mutual certificate based authentication, where the client provides its Client Certificate to the Server to prove its identity. A client certificate is issued by a certificate authority (CA). DualShield has a built-in Root CA and it will use its built-in CA to issue device certificates.
To enable device certificate authentication in DualShield, we need to import the Root CA into its CA Store.
In the DualShield Admin Control, navigate to "Repository | Certificates | Certificate Authority"
Click the "Import Root CA" button on the toolbar
Edit the Root CA
Enable the "Client Authentication" option:
Click "Save"
Finally, you must restart the DualShield service.