Which RootCA certificate file to use with AWS IoT Core

While registering Raspberry Pi as a device in AWS IoT Core. AWS has generated certificates. When downloading a rootCA file from the Amazon dashboard. There are two options. I'd like to know whether to use Amazon Root CA1 or Amazon Root CA3 file. If someone can help me understand the difference between them while using Amazon IoT Cloud? Is there any public rootCA file?

nour_oud•12/5/23, 7:41 PM

Root CA 1 is RSA

Root CA 3 is ECC

You should choose the one that your system supports. Older systems may not support ECC, but if it supports both, you should prefer ECC.

Nnour_oud 👉 Root CA 1 is RSA 👉 Root CA 3 is ECC You should choose the one that your sy...

Umesh LokhandeOP•12/6/23, 7:21 AM

Thank you so much! Just for now, I used the Amazon Root CA3.pem file with Python code running on RPi. And it seems like working fine. If in case any issues, will keep you updated. Maybe the same Root CA I'll try to use with the MQTT Client (MQTTFx) to connect with AWS IoT Core.