Overview

The RM provides pluggable hook mechanism for authenticating connections coming from an OSGi device. This mechanism is an additional guarantee that only authenticated devices will be connected to the RM, because the device ID can be obtained comparatively easy and it is not enough to connect the device to the backend securely.
The authentication can be bidirectional – the device can also verify some credentials sent from the RM to prevent control from unauthorized management system.
The RM provides two ready-to-use verifiers:

• Basic Authentication Verifier – the RM can be configured to require username/password-based authentication and check the provided client credentials. Information on how to activate the verifier can be found in the Installation Guide.
• Client Certificate Verifier – the RM can be configured to verify that the client certificate Common Name is equal to the device identifier. Information on how to activate the verifier can be found in the Installation Guide.

If the users need their own device - RM authentication, a custom Authentication Verifier can be added. More detailed information on how to write and plug verifier in the RM (including bidirectional authentication), can be found in Custom Authentication Plugin from the Programmer Guide.