-
Notifications
You must be signed in to change notification settings - Fork 11
Description
Problem Summary
When configuring MQTTS (MQTT over TLS) on the TSP100IV printer, CA certificate uploads appear to succeed but the certificate does not persist after saving. This prevents using custom CA certificates for TLS verification.
Environment
- Printer Model: TSP100IV
- Connection Type: MQTTS (MQTT over TLS)
- Firmware: (latest available as of January 2025)
Steps to Reproduce
- Generate a CA certificate (tested with both 2048-bit and 4096-bit RSA keys)
- Access the printer's web configuration interface
- Navigate to either:
- CloudPRNT settings page, OR
- SSL/TLS settings page
- Upload the CA certificate
- Interface shows "succeeded" message
- Save settings
- Return to the settings page - certificate is not saved
What We Tried
| Approach | Result |
|---|---|
| 4096-bit CA certificate | Upload shows success, but certificate not saved |
| 2048-bit CA certificate | Upload shows success, but certificate not saved |
| Upload via CloudPRNT configuration page | Says "succeeded" but doesn't persist |
| Upload via SSL/TLS configuration page | Same result - doesn't persist |
Expected Behavior
After uploading a CA certificate and saving settings, the certificate should persist and be used for TLS verification when connecting to MQTT brokers.
Actual Behavior
The web interface indicates the upload succeeded, but upon returning to the settings page or rebooting the printer, the certificate is not present.
Current Workaround
We are currently using the "Accept all" certificate validation option. While this still provides:
- ✅ TLS encryption (all traffic is encrypted)
- ✅ Authentication (username/password required for MQTT)
It does mean:
⚠️ No certificate validation (theoretical MITM risk)
Questions
- Is there a specific certificate format requirement (PEM, DER, chain format)?
- Are there file size limitations for the CA certificate?
- Is there a known issue with certificate persistence on TSP100IV?
- Are there specific firmware versions that address this?
Additional Context
This issue was encountered while setting up the printer to connect to a self-hosted MQTT broker with self-signed certificates. We would prefer to use proper certificate validation rather than "Accept all" for production deployments.
Any guidance on successfully uploading and persisting CA certificates would be appreciated.