-* Generate an [X.509 intermediate CA certificate](iot-hub-x509ca-overview.md#sign-devices-into-the-certificate-chain-of-trust) signed by an existing root CA certificate and upload it to the IoT Hub. Once the intermediate certificate is uploaded and verified, as instructed below, it can be used in the place of a root CA certificate in the IoT Hub. Tools like OpenSSL ([openssl req](https://www.openssl.org/docs/manmaster/man1/openssl-req.html) and [openssl ca](https://www.openssl.org/docs/manmaster/man1/openssl-ca.html)) can be used to generate and sign an intermediate CA certificate.
0 commit comments