Can't Add Device to nrfCloud via REST API

RE: Can't Add Device to nrfCloud via REST API

justin — Sat, 06 Apr 2024 18:16:25 GMT

you can set the expiration using the “dv” parameter when running the scripts.

the default is 10 years.

for nrf9160 devices, you could implement credential update functionality similar to how the scripts operate. signal the device to execute the KEYGEN AT command and have it send back the CSR. create a cert from the CSR and send it back to the device.

for nrf91x1 devices you can use the nRF Cloud provisioning service: https://docs.nrfcloud.com/SecurityServices/ProvisioningService/ProvisioningOverview.html

the fw library is: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/libraries/networking/nrf_provisioning.html

you could use this library as a reference for your own nrf9160 implementation.

RE: Can't Add Device to nrfCloud via REST API

egood — Sat, 06 Apr 2024 13:02:08 GMT

Justin,

One last question that I can't seem to find an answer for in the docs. Is there any expiration of the certificates/credentials that needs to be handled that are created with the above-mentioned scripts? Or are these certificates good for the life of the device?

If there is expiration, hoes does Nordic recommend updating credentials?

RE: Can't Add Device to nrfCloud via REST API

justin — Fri, 05 Apr 2024 22:12:41 GMT

glad to hear.
creating your own credentials will prevent this problem and is the recommended method.

RE: Can't Add Device to nrfCloud via REST API

egood — Fri, 05 Apr 2024 22:03:59 GMT

Justin,

This was with the JITP process. Adding the device manually did not work unfortunately. I finally bit the bullet and updated the scripts to use the Nordic one provided here: utils/python/modem-firmware-1.3+ at master · nRFCloud/utils (github.com)

Specifically:

create_ca_cert.py

device_credentials_installer.py

nrf_cloud_onboard.py


This did work and got the device onboarded correctly. Still not sure why our older script stopped working as it once did. But we will create a new manufacturing script based on the above mentioned, scripts.

RE: Can't Add Device to nrfCloud via REST API

justin — Fri, 05 Apr 2024 16:24:07 GMT

are you still using JITP certs?

if so, it is likely that this device has performed the JITP process like last time, so the device exists in our system but is not yet associated with your team.

you can perform the associate step here: https://nrfcloud.com/#/add-device/lte-device

RE: Can't Add Device to nrfCloud via REST API

egood — Tue, 02 Apr 2024 21:44:52 GMT

Nordic team any update on this? We don't want to attempt to move any devices until this is resolved, because it effetely bricks the unit if we can't use it with nrfCloud.

RE: Can't Add Device to nrfCloud via REST API

egood — Tue, 02 Apr 2024 01:33:18 GMT

If I call FetchDevice via the REST API we get:

{
    "message": "This device is not associated with any team.",
    "code": 40410
}

We had previously deleted the device from nrfCloud using the UI and then attempted to re-provision using the same process as in the original post.

RE: Can't Add Device to nrfCloud via REST API

egood — Tue, 02 Apr 2024 01:28:32 GMT

We have recently been using our provisioning script mentioned above. We now can't add a device for a different reason. The bulk upload to nrfCloud succeeds: with the expected:

{"bulkOpsRequestId":"01HTE5RFRJTY1CP78K1XXX2DSA"}

However, nrfCloud UI simply shows. Failed with no feedback.

Any idea what could be wrong here? Before we at least had some indication of what the issue was. It's the same device previously discussed in this thread.

RE: Can't Add Device to nrfCloud via REST API

justin — Wed, 31 Jan 2024 23:43:49 GMT

[quote user="egood"]If this does happen is the only way to resolve to allow the device to connect to the cloud with JITP enabled firmware? [/quote]

if the device attempts to connect (initiating the JITP process) you will need to add the device to your account using either the nrfcloud.com UI (click the Add devices) button or using the REST API: https://api.nrfcloud.com/v1#tag/IP-Devices/operation/AssociateDevice

RE: Can't Add Device to nrfCloud via REST API

justin — Wed, 31 Jan 2024 23:40:34 GMT

[quote user="egood"]What would cause nrfCloud to think that we want to use JITP[/quote]

You are downloading JITP certificates when using https://api.nrfcloud.com/v1#tag/IP-Devices/operation/CreateDeviceCertificate
The AWS JITP process occurs automatically when a device first attempts to make a connection to nRF Cloud.

[quote user="egood"]Does Nordic typically recommend JITP[/quote]

No, JITP is not recommended for production products.
See https://docs.nrfcloud.com/Devices/Associations/Provisioning.html for an overview.

We have example python scripts for creating your own credentials: https://github.com/nRFCloud/utils/tree/master/python/modem-firmware-1.3%2B

See create_device_credentials.py and/or device_credentials_installer.py

RE: Can't Add Device to nrfCloud via REST API

egood — Wed, 31 Jan 2024 14:49:11 GMT

I just re-read your replay. Excuse my quick draw response, you answered my first question. It's possible that the device connected to the cloud before the POST via the REST API was done, We do upload prod firmware after loading the certs, but before uploading the CSV, because as I mentioned we do the units in batches.

If this does happen is the only way to resolve to allow the device to connect to the cloud with JITP enabled firmware?

RE: Can't Add Device to nrfCloud via REST API

egood — Wed, 31 Jan 2024 14:21:07 GMT

Thanks for deleting the device on your end, that worked! I have a few additional questions:

1. What would cause nrfCloud to think that we want to use JITP as apposed to just creating the device on nrfCloud? I would like to understand this so we can track down why it happened to prevent it from happening again. Because we do not currently have JITP enabled in our firmware.

2. Does Nordic typically recommend JITP over the process of just adding the device to the cloud at the time of loading the certs during manufacturing?

Thanks again,

Eric

RE: Can't Add Device to nrfCloud via REST API

Lincoln Thomas — Wed, 31 Jan 2024 06:53:16 GMT

Hello Eric,

That device is shown as provisioned but not associated with any team yet. This normally occurs if you flash JITP certs you obtained from /devices/{' + IMEI + '}/certificates onto the device, and then turn on the device, before calling your POST api.nrfcloud.com/.../devices. The device connects to nRF Cloud via MQTT and waits to be associated to a team. Could you have done this?

I have deleted the device from our database. Please try your process again.