Device Identity Key in nrf9160

[Stefan Schmidt]

Dear Nordic Support-Team,

 I am trying to documentation on the Device Identity key in the nrf9160. I found something here: https://infocenter.nordicsemi.com/topic/ref_at_commands/REF/at_commands/security/cmng_set.html as key type

6 – Device identity public key.

but no further documentation. I am able to use this key to verify a JWT created on my device, but I would like to understand more before actually using it in an application.

According to this https://docs.nordicsemi.com/bundle/nrf-cloud/page/SecurityServices/IdentityService/IdentityOverview.html#process, only nrf91x1 devices have a dedicated Identity Key pair.

Thanks

Stefan

[Tuomas P]

Hello Stefan

In Nordic SiP manufacturing the SiP trusted FW is requested to create key pair. Private key stays protected in the trusted FW and public key is extracted. The SiP is also programmed with UUID. The public key and UUID pair is stored in nRF cloud. 

The device can make a token what nRF Cloud identity service can verify.

Did you have some specific question in mind on keys? 

[Stefan Schmidt]

Hi Tuomas,

 thank you for the fast response.

I have been using this key pair for a JWT and was able to verify the signature with the public key.

But before using this in an application I wanted to make sure that this key pair is meant for this purpose.

Thanks

Stefan