NRF Cloud & Developer account

[Alskandar]

Hi,

I would like some clarification regarding the use of a developper account.
I generated a Service Evaluation Token, tested with some queries, everything works.

Now, i want to generate JWTs for each of my devices.
I provisioned the device on the account ( like explained https://docs.nrfcloud.com/Devices/Security/JWT.html ), it's ok.

How then to retrieve JWT ?
On jwt.io, i fill in the different fields (uuid, ca private key and device public key), the signature isn't verified (i deduce that the JWT is false).

I tried ti generate directly on the device a JWT (AT%JWT), but if i use it (with postman, i get an error 40100, this ok with SET).

Is it possible with a developper account to perform location requests (gps) with JWTs for each device ?

Thanks for your help

PS: i'm not using a nRF9160 DK but an Icarus Board (i can do tests with a DK however).

[Øyvind]

Hello,

During the summer season, our workforce is currently operating with reduced staff levels throughout the company, which may lead to slight delays in our response time as we await additional resources. Rest assured, we are actively addressing all issues and working diligently to resolve them promptly.

---

Could you please include some information on your account i.e. Tenant ID and Device ID. 

Thanks. 

Kind regards,
Øyvind

[Alskandar]

What is Tenant ID ?

I test, per example, with this one: 50345835-3031-4ea3-80b2-1c2367baac04

[Øyvind]

There is some more information on JWT in the nRF Cloud REST API documentation. Does this help for you?

Alskandar said:

What is Tenant ID ?

Sorry, The team ID is referred to as the tenant ID in the response of a call to the FetchAccountInfo endpoint and some other endpoints.

[Alskandar]

I read and undestand but it doesn't help me.

My team ID -> dffc559c-67fa-496f-86e6-298de6fd7cf8

I did the steps:

1. ProvisionDevices -> OK
2. RegisterPublicKeys -> OK

But i can't generate the good JWT for interfacing all.

On first step, what should i put in Private Key ? I tested with the CA Certificare *.prv.pem

On 2nd step, i tested with generated files (private_key.pem).

None of these generated JWT works.

I don't undestand what i'm doing wrong.

[justin]

How then to retrieve JWT ?

You can use the AT command directly, but you must ensure that the parameters are correct.
See https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/libraries/networking/nrf_cloud.html#c.nrf_cloud_jwt_generate for generating JWTs to be used with the nRF Cloud REST API.
It will create the JWT using the private key in the configured modem sec tag (CONFIG_NRF_CLOUD_SEC_TAG).

Note that you do not need to both provision your device AND register a public key. See the use case explanation in https://api.nrfcloud.com/v1#tag/IP-Devices/operation/RegisterPublicKeys.
The private key stored in your device must correspond to the public key provided to nRF Cloud.
When creating a JWT on the device, you must use the sec tag where that private key is stored.

Have a look at the following sample for an example of using REST locations services from the device:
https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/samples/cellular/nrf_cloud_rest_cell_location/README.html

The function nrf_cloud_rest_location_get does the REST API call and the JWT is generated automatically.

Is it possible with a developper account to perform location requests (gps) with JWTs for each device ?

Yes, developer accounts get 500 requests per month.
https://docs.nrfcloud.com/AccountAndTeamManagement/Plans/PlanOverview.html?h=plans#developer