Endpoints
| Type | Supported modes | Endpoint | Description | Warnings |
|---|---|---|---|---|
MQTT |
|
|
Unsecure plain MQTT connection. Not recommended for production grade applications. Only available for prototyping on discover offers. Please reach out to us for specific use cases. |
|
MQTTS |
|
Secure MQTTS connection. Recommended for device mode. Supports both server and client authentications. |
||
Secure Websocket |
|
Secure MQTTS connection over Websocket. Supports server authentication only. |
||
MQTTS |
|
|
Secure MQTTS connection. Recommended. Supports both server and client authentications. |
RootCA change in March 2026 see server certificate Root CA section |
Secure Websocket |
|
Secure MQTTS connection over Websocket. Supports server authentication only. |
Live Objects MQTTS endpoints support the following TLS versions:
-
TLS v1.2
-
TLS v1.3
And the following cipher suites:
-
TLS_AES_256_GCM_SHA384 for TLS v1.3 only
-
TLS_AES_128_GCM_SHA256 for TLS v1.3 only
-
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 for TLS v1.2 only
-
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
|
Mandatory: For TLS connections, MQTT devices MUST support:
|
TLS Server Name Indication (SNI) extension must be used for TLS connections. The SNI host_name field must match the target domain name. TLS connection is refused if host_name is invalid.
|
It is strongly recommended to use MQTTS for your production environment.
|
Deprecated endpoints
The device mode on the following endpoints is deprecated. The End of Service for these mode and enpoint combinations is scheduled for the 16th of March, 2026.
| Type | Modes | Endpoint | Description | Warnings | End of service |
|---|---|---|---|---|---|
MQTT |
|
|
Unsecure plain MQTT connection. |
Deprecated |
not yet scheduled |
MQTTS |
|
Secure MQTTS connection. Supports both server and client authentications. |
Deprecated |
16th of March, 2026 |
|
Websocket |
|
Secure plain MQTT connection over Websocket. |
Deprecated |
16th of March, 2026 |
MQTTS Server certificates Root CA
The MQTTS server certificates of Live Objects are renewed every year and signed by Digicert.
| domain name | root certificate |
|---|---|
mqtt.liveobjects.orange-business.com |
|
liveobjects.orange-business.com |
DigiCert Global Root CA, until 16th of March, 2026, DigiCert Global Root G2 from 16th of March, 2026. |
The DigiCert Global Root CA will be distused in April 2026., On Live Objects Servers it will be replaced with DigiCert Global Root G2 in March 2026. The renewal of the truststore must take place before that date
Your device must have in its truststore the root CA DigiCert Global Root G2. Use the Live Objects (firmware) resource update feature to update the truststore.
Your application or external connector must have in its truststore the root CA DigiCert Global Root CA and DigiCert Global Root G2 to ensure smooth transition between the two certification chains.
|