How Toyota securely deployed HiveMQ with mTLS on AWS to power Smart Manufacturing

This article details how Toyota deployed HiveMQ MQTT broker on AWS ECS with mutual TLS (mTLS) for secure Industrial IoT messaging across North American manufacturing facilities.

• Toyota's NEXUS IIoT platform unifies plant floor data for real-time operational insights and predictive maintenance
• HiveMQ runs on Amazon ECS Fargate behind a Network Load Balancer with TLS pass-through
• Mutual TLS authentication requires both client and server certificates signed by trusted Certificate Authority
• Route 53 provides DNS resolution; NLB routes Layer 4 TCP traffic to HiveMQ containers
• Certificates and credentials stored in AWS Secrets Manager, fetched at ECS task startup
• HiveMQ configuration enforces REQUIRED client authentication mode for zero-trust connectivity
• ECS service auto-scales and self-heals unhealthy HiveMQ tasks automatically
• Validation performed using MQTT Explorer with publisher/subscriber certificate configurations

Toyota's architecture demonstrates enterprise-grade IIoT messaging combining HiveMQ security with ECS scalability for factory floor equipment connectivity.