Open the Google IoT console.

Select IoT Core from the left-hand menu.

Select Create Registry.

1. Set the Registry ID and Region.

2. Create the registry.

Select Devices from the left-hand menu.

Select Create a Device.

Enter a name and click Create.

Create a key using OpenSSL in a terminal, as follows:

1. Run this command in a shell prompt that has openssl installed:

   openssl req -x509 -newkey rsa:2048 -keyout rsa_private.pem 
   -nodes -out rsa_cert.pem -subj "/CN=unused"

   This will create 2 files, named rsa_cert.pem and rsa_private.pem

2. Convert the rsa_cert.pem and rsa_private.pem to PFX in your local machine:

   openssl pkcs12 -inkey rsa_private.pem -in rsa_cert.pem -export 
   -out rsa_cert.pfx

Select the device, select its Authentication tab, and click Add Public Key.

Select RS256_X509 for the Public key format and click Add.

Copy the text of rsa_cert.pem into the dialog box.

Download the Google CA root certificate.

Click the Google IoT tab and enter the following information as provided by Google:

Press the Reconfigure button to add that configuration to the list.

Select the Authentication tab in the second row of tabs.

In the CA Certificate field, enter a path to the Google CA root certificate file that you downloaded previously. If the certificate is in PEM format, you can use it without modification even if the DataHub instance requests a CER or CRT format file.

Open the Connection tab.

Enter a Label to identify the connection. There should be no spaces in the name. It doesn't matter what name is chosen, but it should be unique to other connection names.