TCP Server with TLS on NI Linux RT

[B.Settles]

I'm running a TCP server task that I would like to start using with TLS. Are there any recommended locations or native services for storing the associated certificates? Assume these certificates need to be accessible by lvuser in order to read them into the LabVIEW application for setting up the TLS protocol.

[SumRunner]

The recommended certificate storage for Linux is /etc/ssl/certs. I confirmed this with our NILRT engineers, and found several good resources on how to do this by searching for "Linux Distribution certificate store". 

In his presentation at our last conference, Tim Cannon shared several tools he's built, some of which store data to secure locations, but these were mostly Windows based. It's worth looking at hsi presentation at Security Tools for LabVIEW - TSS Oct 2024 - NI Community.

You can also consider using the TPM chip. If you are PXI, there is a TPM chip in your controller. We have not had TPM in cRIO, but I do have a cRIO-9048 now available with a TPM, contact me and we'll talk about it. Future cRIOs will have TPMm chips available. (steve.summers@emerson.com).