# Home Assistant -\> Mosquitto Brocker bridge to HiveMQ -\> Step by step?

**URL:** <https://community.hivemq.com/t/home-assistant-mosquitto-brocker-bridge-to-hivemq-step-by-step/3989>\
**Category:** Uncategorized\
**Created:** [January 30, 2026, 3:37pm UTC](https://community.hivemq.com/t/home-assistant-mosquitto-brocker-bridge-to-hivemq-step-by-step/3989 "2026-01-30T15:37:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ohaldi](https://avatars.discourse-cdn.com/v4/letter/o/bcef8e/32.png) [@ohaldi](https://community.hivemq.com/u/ohaldi)\
**Post date:** [January 30, 2026, 3:37pm UTC](https://community.hivemq.com/t/home-assistant-mosquitto-brocker-bridge-to-hivemq-step-by-step/3989/1 "2026-01-30T15:37:58Z")

</div>

Hello,

I am trying to set up an MQTT bridge between a Mosquitto broker installed on Home Assistant and a HiveMQ broker.  
I created the configuration file `\share\mosquitto\hivemq.conf`, with the following content:

#Mosquitto to HiveMQ Cloud (MQTT over TLS)  
connection hivemq  
address \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*.s1.eu.hivemq.cloud:8883  
remote\_username \*\*\*\*\*  
remote\_password \*\*\*\*\*  
topic # both 0

I also relied on several examples and variants found on the web. However, the connection is rejected every time.  
An AI also suggested several solutions, but none of them have worked so far.  
Could someone help me identify the issue in my `.conf` file and explain what is wrong?  
Regards  
Otto

---

<div class="post-metadata">

**Author:** ![Daria\_H](https://avatars.discourse-cdn.com/v4/letter/d/dfb087/32.png) [@Daria\_H](https://community.hivemq.com/u/Daria_H)\
**Post date:** [January 30, 2026, 3:50pm UTC](https://community.hivemq.com/t/home-assistant-mosquitto-brocker-bridge-to-hivemq-step-by-step/3989/2 "2026-01-30T15:50:23Z")

</div>

Hi @ohaldi,

Welcome to the HiveMQ Community, and thank you for the detailed description of your setup. It is great to see you exploring MQTT, Home Assistant, and HiveMQ together.

From the configuration you shared, the main issue is that the bridge is currently not configured to use TLS, even though HiveMQ Cloud on port **8883** requires a TLS connection. To resolve this, please try the following steps.

* * *

### 1. Download the CA certificate

On the Home Assistant system where the Mosquitto broker runs:

1. Download the Let’s Encrypt ISRG Root X1 certificate from:  
`https://letsencrypt.org/certs/isrgrootx1.pem`
2. Save the file into the Mosquitto share, for example:
  - On the host: `\share\mosquitto\isrgrootx1.pem`
  - Inside the container: `/share/mosquitto/isrgrootx1.pem`

* * *

### 2. Adjust the Mosquitto bridge configuration

Update your `\share\mosquitto\hivemq.conf` to something along these lines (adapting the placeholders to your actual values):

```conf
# Mosquitto -> HiveMQ Cloud (MQTT over TLS)
connection hivemq
address <your-cluster-id>.s1.eu.hivemq.cloud:8883

bridge_protocol_version mqttv311
cleansession true
try_private false

remote_username <your-hivemq-cloud-username>
remote_password <your-hivemq-cloud-password>

# TLS – Let’s Encrypt ISRG Root X1 for HiveMQ Cloud
bridge_cafile /share/mosquitto/isrgrootx1.pem

topic # both 0

```

Key points:

- `bridge_cafile` ensures that Mosquitto actually establishes a **TLS** connection and trusts the HiveMQ Cloud certificate chain.
- The `remote_username` and `remote_password` must be your **HiveMQ Cloud cluster MQTT credentials** , not your HiveMQ Cloud account login.

* * *

### 3. Restart Mosquitto and verify in the logs

After saving the configuration:

1. Restart the **Mosquitto broker add-on** in Home Assistant.
2. Check the Mosquitto logs. A successful connection should look similar to:
  - `Connecting bridge hivemq`
  - `Connected bridge hivemq`

3. If the connection still fails and you suspect a certificate/CA issue, you can perform a **temporary debug test** by adding:

```conf
bridge_insecure true

```

to the same `connection hivemq` section. This disables server certificate verification for the bridge and helps to confirm whether the failure is strictly related to TLS validation.  
**Important:** This is only for short-term debugging. Once you have confirmed the root cause, please remove this line again or set:

```conf
bridge_insecure false

```

so that the certificate is properly verified in normal operation.

If the connection still does not succeed after these steps, the logs should show whether it is a TLS issue (certificate / handshake) or an authentication issue (username / password / hostname).  
Kind regards,  
Dasha  
_HiveMQ Support Team_

---

<div class="post-metadata">

**Author:** ![ohaldi](https://avatars.discourse-cdn.com/v4/letter/o/bcef8e/32.png) [@ohaldi](https://community.hivemq.com/u/ohaldi)\
**Post date:** [January 31, 2026, 6:22pm UTC](https://community.hivemq.com/t/home-assistant-mosquitto-brocker-bridge-to-hivemq-step-by-step/3989/3 "2026-01-31T18:22:02Z")

</div>

Hello Dasha,  
Thanks for your help. I also learn a much with your example.  
It seem to working now.  
In log file I see no error :  
2026-01-31 19:15:11: Connecting bridge hivemq (17f1c4fc4e5040e8b39cf25d9227eae0.s1.eu.hivemq.cloud:8883)  
2026-01-31 19:15:11: mosquitto version 2.0.22 running  
but I don’t see the message : Connected bridge hivemq  
I also set the debug to : Bridge\_insecure falseRegards  
Best Regards  
Otto

---

<div class="post-metadata">

**Author:** ![SShet](https://avatars.discourse-cdn.com/v4/letter/s/b3f665/32.png) [@SShet](https://community.hivemq.com/u/SShet)\
**Post date:** [February 4, 2026, 11:46am UTC](https://community.hivemq.com/t/home-assistant-mosquitto-brocker-bridge-to-hivemq-step-by-step/3989/4 "2026-02-04T11:46:35Z")

</div>

Hello @ohaldi

Thank you for the update and the logs. We can see that Mosquitto is attempting to connect the bridge (`Connecting bridge hivemq`), but since we do not see `Connected bridge hivemq`, The TLS/MQTT connection is still not completing successfully.

To help us pinpoint the issue, could you please:

1. Share the bridge section of your bridge configuration (you can mask credentials).  
In particular, please verify that it contains entries similar to:

2. Enable more detailed logging by adding:

3. (Optional but helpful) Test the same credentials directly with a simple client, for example:

Regards,  
Sheetal from HiveMQ Support

---

<div class="post-metadata">

**Author:** ![ohaldi](https://avatars.discourse-cdn.com/v4/letter/o/bcef8e/32.png) [@ohaldi](https://community.hivemq.com/u/ohaldi)\
**Post date:** [February 4, 2026, 12:45pm UTC](https://community.hivemq.com/t/home-assistant-mosquitto-brocker-bridge-to-hivemq-step-by-step/3989/5 "2026-02-04T12:45:12Z")

</div>

Hello,  
Many thanks for your help. My file hivemq.conf look like this:

# =======================================================

# Mosquitto to HiveMQ Cloud (MQTT over TLS) / 04.02.2026

# =======================================================

connection hivemq  
address 17f1c4fc4e5040e8b39cf25d9227eae0.s1.eu.hivemq.cloud:8883

bridge\_protocol\_version mqttv311  
cleansession true  
try\_private false

remote\_username ateho  
remote\_password @Lock2003hi

# TLS – Let’s Encrypt ISRG Root X1 for HiveMQ Cloud

bridge\_cafile /share/mosquitto/isrgrootx1.pem

topic # both 0  
bridge\_insecure false

log\_type all  
log\_timestamp true

Now every thing work well and I see much more information on the log file directly in Home Assistant.  
Regards  
Otto
