Thingy91: Serial Timeout when running Claiming and Provisioning python script

Question

Hi Dev Team, 
 I am trying reprovision my Thingy91 so that I may generate a JWT signed with a device key to use A-GNSS and REST FOTA. 
 I have been following the guide for nRF Cloud Device Provisioning . All steps were successful up until I tried to run the claim_and_provision_device.py. I would get a serial timeout at AT%ATTESTTOKEN. The error reads: 
 C:\Users\x\Nordic\cell-fund\utils-master\python\modem-firmware-1.3+>python ./claim_and_provision_device.py --api_key *redacted* --ca ./*redacted*_ca.pem --ca_key ./*redacted*_prv.pem

Loading CA and key...
Opening serial port...
Available ports:
 1: COM8 Thingy:91
Selected serial port: COM8

Disabling modem...
-> at AT+CFUN=4

Serial timeout
-> at AT%ATTESTTOKEN
String b'%ATTESTTOKEN: ' not detected in line b'ERROR
'
ATTESTTOKEN command failed 
 The Thingy91 firmware is up to date ( mfw_nrf9160_1.3.5) and I'm building the projects on nRF SDK v2.6.1 
 I thought the issues might be: 
 
 Wrong/invalid API key and certificates
 
 I triple checked my API key (copy/pasted and hand-typed), autocompleted any certificate paths, and tried cert arguments with the equal signs similar to the example code in the github repo 
 python3 ./claim_and_provision_device.py --apikey $API_KEY --ca=./ca.pem --ca_key=ca_prv_key.pem

Interference caused by build
 
 I ran both the nRF Device Provisioning sample built with prj.conf settings specified in the repo and the cellfund_less2_exer2 solution because it was minimal and barebones.

None of the above resolved the ATTESTTOKEN issue. 
 It might be worth noting that in nRF Cloud, I have my device listed twice - the first for the initial thingy91 setup, and the second for the reprovisioning.

Hoping you can provide some guidance.

Pete Skeggs · Accepted Answer

Hello. I did not realize you were following that Miro diagram and "JWT authentication" document. These are unnecessary to follow to accomplish your goal. They are only provided to give a curious user a deep explanation into all the options for provisioning and how JWTs work in a general sense with nRF Cloud. In fact, the note on the "JWT authentication" document states: 
 Note: 
 This guide is not a tutorial, and does not model real-world use cases with specific hardware. Instead, this guide provides a conceptual understanding of JWT authentication on nRF Cloud using tokens that you generate using an online tool. 
 The device provisioning service is definitely not required to use JWTs. You do not need to run the nRF provisioning sample. You do not need to use a script to generate a JWT to use with your Thingy:91. You only need to have ES256 certificates and modem firmware >= 1.3.0 installed in the device. The device_credentials_installer.py script will install ES256 certificates for you. Note that in your new screenshot of the terminal output, it is still having serial communication issue -- it says "Serial timeout" . What application was installed on your Thingy:91 when you ran this script? After you used the device_credentials_installer.py and ran nrf_cloud_onboard.py , you should see your device listed again in your nRF Cloud account. Do you? I suspect they failed, because you likely had the nRF provisioning sample present. The interactive shell is not supported by device_credentials_installer.py -- it sends raw modem AT commands, not shell commands, to the device. 
 If your device is not listed in your account, please first install the AT client sample which the device_credentials_installer.py script needs for it to run properly. A precompiled copy of the AT client sample is available in the Thingy:91 downloads .zip file here: https://www.nordicsemi.com/Products/Development-hardware/Nordic-Thingy-91/Download#infotabs . 
 Please rerun those two scripts and share the full output of each. Also tell me if you now see your device listed again in your account. Once your device is listed, your device is fully ready to use JWTs. The nrf_cloud_jwt library does this for you. This library is automatically used in our sample applications for REST: nrf_cloud_rest_fota, nrf_cloud_rest_device_message, and nrf_cloud_rest_cell_location, and location samples. You only need to compile and flash one of these samples to try it out. Please see this more-relevant documentation: https://docs.nordicsemi.com/bundle/ncs-latest/page/nrf/external_comp/nrf_cloud.html https://docs.nordicsemi.com/bundle/ncs-latest/page/nrf/libraries/networking/nrf_cloud_rest.html https://docs.nordicsemi.com/bundle/ncs-latest/page/nrf/samples/cellular/nrf_cloud_rest_fota/README.html

Thingy91: Serial Timeout when running Claiming and Provisioning python script

Top Replies