• State Verified Answer
  • Replies 6 replies
  • Subscribers 74 subscribers
  • Views 246 views
  • Users 0 members are here
Attachments (0)
Nordic Case Info
  • Case ID: 339679
Options

Updating Certificate using Cellular Monitor error

User_PP

Hey, 

I flashed the actinius icarus board (nrf 9160) with the at_sample application, successfully sent the modem to sleep using "AT+CFUN=4" command with the Serial Terminal and tried to update CA certificate, Client certificate and Private key with a J-Link conncetion. The update failed with "Unable to Write TLS credential" (see screenshot, red text at the bottom). Does anyone know how to resolve this issue? I removed the keys on the screenshot, for updating they were present

Thank you very much 

  • 0

    Hello,

    could be a format issue maybe. Are you copy pasting the entire contents of the pem file when writing the certificates?

  • 0 in reply to Hakon

    Hey Hakan, thanks for your reply. I do not have any .pem file, but used a .crt and a .key file with the following format:


    -----BEGIN CERTIFICATE-----
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    0000000000000000000000000000000000000000000000000000000000000000
    000000000000000000000000000000000000
    -----END CERTIFICATE-----

    Do I need a .pem file? and if so, could you give me a bit more information about that?

    Thank you

  • 0 in reply to User_PP
    User_PP said:
    Do I need a .pem file? and if so, could you give me a bit more information about that?

    Not if you are using certificate manager, then you just need the contents and not the file itself. Have you tried writing the certificates in code using at+cmng?

  • 0 in reply to Hakon

    I don't have access to the board today, but I will try on monday. 

    When you said 'writing in code', did you mean to use an AT command with the serial monitor?

    If so, should I try the following syntax to write e.g. a client certificate?

    AT%CMNG=0, 12345678, 0," -----BEGIN CERTIFICATE----- 000... ...000 -----END CERTIFICATE-----”

    I took this code snippet from an example here

  • +1 in reply to User_PP
    User_PP said:
    If so, should I try the following syntax to write e.g. a client certificate?

    AT%CMNG=0, 12345678, 0," -----BEGIN CERTIFICATE----- 000... ...000 -----END CERTIFICATE-----”

    Yes, that seems to be the correct approach.

Related
Terms of service