7 File System

The RNWF02 provides an internal secured storage for storing following types of certificates and keys to use with the Transport Layer Security (TLS).

  • x509 root certificates
  • Client/Device certificates
  • Private keys

The secured certificate store is of 60 KB in size and it is write and erase only storage space. The certificates and keys flashed in this memory is only readable through the device firmware.

The certificate store can be accessed through the AT commands. For more details on AT commands, refer to the AT Commands.

The manual certificate/key flashing would need a serial terminal application with X-Modem/Y-Modem file transfer support. In order to simplify this process the firmware release package includes a python based utility which can Flash these files through a simple CLI

The utility also support Send To option on Windows operating system where these files can be flashed into RNWF02 device through the right click options.

By default the RNWF02 modules include following Root Certificates in the certificate store for easier could connectivity.
Table 7-1. Pre-packaged TLS Root Certificates
IssuerFilenameExpiryPublic KeySignature Alg.Notes
Amazon Root CA 1AmazonRootCA1.der17 January 2038 01:00:00RSA (2048 bits)SHA256RSAAWS Cloud
Baltimore CyberTrust RootBaltimoreCyberTrustRoot.der13 May 2025 00:59:00RSA (2048 bits)SHA1RSAAzure Cloud

DigiCert High Assurance EV Root CA

DigiCert.der10 November 2031 01:00:00RSA (2048 bits)SHA1RSA
DigiCert Global Root G2DigiCertGlobalRootG2.crt15 January 2038 13:00:00RSA (2048 bits)SHA256RSAAzure Cloud

DigiCert High Assurance EV Root CA

DigiCertSHA2.der22 October 2028 13:00:00RSA (2048 bits)SHA256RSA

Entrust Root Certification Authority

EnTrust.der27 November 2026 21:53:42RSA (2048 bits)SHA1RSA
GlobalSign Root CAGlobalSignRoot.der28 January 2028 13:00:00RSA (2048 bits)SHA1RSA

Internet Security Research Group Root X1

isrgrootx1.der04 June 2035 12:04:38RSA (4096 bits)SHA256RSALetsEncrypt
QuoVadis Root CA 2QuoVadis_Root.der24 November 2031 19:23:33RSA (4096 bits)SHA1RSA

VeriSign Class 3 Primary Certification Authority

VeriSign.der17 July 2036 00:59:59RSA (2048 bits)SHA1RSA

Setup Details – The certificate and key utility uses the AT command interface serial port of the RNWF02 module. The PC companion mode of the setup must be used to use the certificate and key utility.