WWFIRST Elegoo Curriculum
WWFIRST Certificate Install - MacOS
(If you require assistance, please contact firstname.lastname@example.org)
What is a Digital Certificate and why use it? 2
What is a Digital Certificate 2
Why is security needed on the Internet? 2
Why a WWFIRST Certificate Authority (CA)? 3
Why do I need to install a new WWFIRST Certificate Authority? 3
Why create our own? 3
Okay, so how do I install this now? 4
A Digital Certificate is an electronic "password" that allows a person or organization to exchange data securely over the Internet using the public key infrastructure (PKI). Digital Certificate is also known as a public key certificate or identity certificate. It’s similar to a passport or driver’s license. It lets you know “officially” who each person or organization is.
The Internet is an open communications network that was not originally designed with security in mind. If we want to use the Internet as a communication tool, users must be able to communicate securely.
What does security provide?
The persons / entities with whom we are communicating are really who they say they are.
The information within the message or transaction is kept confidential. It may only be read and understood by the intended sender and receiver.
The information within the message or transaction is not tampered accidentally or deliberately with en route without all parties involved being aware of the tampering.
The sender cannot deny sending the message or transaction, and the receiver cannot deny receiving it.
Access to the protected information is only realized by the intended person or entity.
A Certificate Authority (CA) issues digital certificates that contain a public key and the identity of the owner. The matching private key is not made available publicly, but kept secret by the end user who generated the key pair.
The certificate is also a confirmation or validation by the CA that the public key contained in the certificate belongs to the person, organization, server or other entity noted in the certificate. A CA's obligation in such schemes is to verify an applicant's credentials, so that users and relying parties can trust the information in the CA's certificates. CAs use a variety of standards and tests to do so.
In essence, the Certificate Authority is responsible for saying "yes, this person is who they say they are, and we, the CA, verify that". It’s similar to a passport or driver’s license office.
If we want to create an officially recognized Certificate to communicate with the Elegoo Smart Robot Cars, it will cost us several thousands of dollars each year. If we create our own, it’s free.
The only trust is between the Driver Station server, the Elegoo Smart Robot Car and the device you use to control the robot car. The certificates are *not* used for anything else, and we can assure that each robot car and control device communicates with the server over their own “secure channel”.
This is done slightly differently in each Operating System, but we will guide you step by step with as many screenshots as possible.
Version [1.2] (February 8, 2021) -- Created by WWFIRST.CA