Updating Certificate using Cellular Monitor error

[User_PP]

Hey, 

I flashed the actinius icarus board (nrf 9160) with the at_sample application, successfully sent the modem to sleep using "AT+CFUN=4" command with the Serial Terminal and tried to update CA certificate, Client certificate and Private key with a J-Link conncetion. The update failed with "Unable to Write TLS credential" (see screenshot, red text at the bottom). Does anyone know how to resolve this issue? I removed the keys on the screenshot, for updating they were present

Thank you very much 

[Hakon]

Hello,

could be a format issue maybe. Are you copy pasting the entire contents of the pem file when writing the certificates?

[User_PP]

Hey Hakan, thanks for your reply. I do not have any .pem file, but used a .crt and a .key file with the following format:

-----BEGIN CERTIFICATE-----
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000
-----END CERTIFICATE-----

Do I need a .pem file? and if so, could you give me a bit more information about that?

Thank you

[Hakon]

User_PP said:

Do I need a .pem file? and if so, could you give me a bit more information about that?

Not if you are using certificate manager, then you just need the contents and not the file itself. Have you tried writing the certificates in code using at+cmng?

[User_PP]

I don't have access to the board today, but I will try on monday. 

When you said 'writing in code', did you mean to use an AT command with the serial monitor?

If so, should I try the following syntax to write e.g. a client certificate?

AT%CMNG=0, 12345678, 0," -----BEGIN CERTIFICATE----- 000... ...000 -----END CERTIFICATE-----”

I took this code snippet from an example here

[Hakon]

User_PP said:

If so, should I try the following syntax to write e.g. a client certificate?

AT%CMNG=0, 12345678, 0," -----BEGIN CERTIFICATE----- 000... ...000 -----END CERTIFICATE-----”

Yes, that seems to be the correct approach.

[User_PP]

This approach seems to have worked, thanks!