All Products
Search
Document Center

ApsaraMQ for MQTT:Unique-certificate-per-device authentication operations

Last Updated:Mar 11, 2026

With unique-certificate-per-device authentication, each device connects to ApsaraMQ for MQTT using its own access credential. Your application server manages these credentials through the following API operations.

Credential lifecycle

The four API operations cover the full credential lifecycle:

  1. Register a credential when you provision a new device.

  2. Query a credential to retrieve its current details.

  3. Refresh a credential to generate updated access information.

  4. Delete a credential to revoke a device's access.

API operations

OperationDescription
RegisterDeviceCredentialCreates an access credential for a device.
GetDeviceCredentialQueries the access credential of a device.
UnRegisterDeviceCredentialDeletes the access credential of a device.
RefreshDeviceCredentialUpdates the access credential of a device.

Set request parameters and handle return values according to each operation's API reference page. Otherwise, the call may fail. For detailed parameter descriptions, request syntax, and error codes, see the linked API reference for each operation.