The overall system setup is as explained
- SERVER which connects with the client(Embedded device) on SSL/TLS
- Embedded Device which acts a CLIENT and communicates with the server
The Server can also be accessed using web browsers (mozilla, chrome etc).
Through the web browser we downloaded/extracted the root CA certificates which were stored in the web browsers (Clients). It consists of 2 Root CA,
1. Root CA
This is the self signed certificate by CA
2. Intermediate CA Domain validation CA
This certificate is signed by Root CA
This certificate is used to signed the server certificate
We needed Root CA(s) on the embedded device so that it can be used to authentic the server during the SSL/TLS handshake.
So for our embedded device, if we need to put the root CA certificates, as per our knowledge we should be able to use the same certificates which can be embedded in the firmware.
Question: do we need to store both the certificates (Root and Intermediate CA) on the embedded device or any one of them is sufficient? If only one, which one should be stored?