Azure IoT FOTA cannot download update images

RE: Azure IoT FOTA cannot download update images

Thomas — Fri, 02 May 2025 12:14:04 GMT

Not sure what you mean by "secured" container. My firmware files are stored in an Azure storage account in the blob containeres area. The files are accessible from the internet.

RE: Azure IoT FOTA cannot download update images

Thomas — Fri, 02 May 2025 12:12:04 GMT

I have been on different version, now at 3.0 but at least from 2.6.x.

RE: Azure IoT FOTA cannot download update images

srubin-ns — Fri, 02 May 2025 12:02:41 GMT

Also, my problem(s) seems to be rooted in how the credentials for downloading the firmware image are passed down to the device. I'm not seeing them. Are your update images stored in a secured Azure storage container? Thanks again

RE: Azure IoT FOTA cannot download update images

srubin-ns — Fri, 02 May 2025 12:01:16 GMT

Thoman, thanks for that response. It's encouraging! Can you please tell me which NCS version you're using?

RE: Azure IoT FOTA cannot download update images

Thomas — Fri, 02 May 2025 09:38:37 GMT

I have the Azure FOTA working in more than one project. It is based on the sample and nothing is changed related to FOTA. So I will say that the current implementation works.

In my schedule is a task to update the nRF Connect Azure FOTA code so that it propery supports the Azure ADU (Azure Device Update) service. This will integrate updating much better with IoT Hub and Azure provissioning service.

I also have some workaround to support Azure PnP devices which is not possible with the current nRF Connect Azure code. I will see if i can integrate this better, currently you need to modify the SDK code to make PnP work.

RE: Azure IoT FOTA cannot download update images

dejans — Tue, 29 Apr 2025 08:56:39 GMT

Hi,

Do you have any update on your testing? Have you made any progress?

Best regards,
Dejan

RE: Azure IoT FOTA cannot download update images

dejans — Fri, 25 Apr 2025 12:07:41 GMT

Hi,

Azure FOTA is part of the Azure IoT Hub sample. You can look at firmware update and additional configuration sections of the sample. Additional information is available in Azure FOTA library configuration. You may also want to look at Azure FOTA sample which was separate sample before NCS v2.5.0.

Best regards,
Dejan

RE: Azure IoT FOTA cannot download update images

srubin-ns — Thu, 24 Apr 2025 12:35:31 GMT

dejans , thanks for your detailed response. They do lead me back to the more basic questions: Does FOTA with NCS and Azure IoT actually work? Is there an example? Thank you

RE: Azure IoT FOTA cannot download update images

dejans — Thu, 24 Apr 2025 05:31:19 GMT

Hi,

[quote user="srubin-ns"]

I think I understand the idea of the SAS stuff you mentioned, but what's missing is that there is no token sent in the manifest, or maybe there is, but the FOTA download is not using it.

None of the nRF documentation or examples give any hint as to how to use the tokens. It was my understanding that this was all built into the Azure FOTA library.

[/quote]

SAS tokens are not natively supported by the Azure FOTA library. This means that if you want to use them, you need to implement that yourself. I am sorry for any possible confusion. Possible alternative is to use encrypted images which can be decrypted by MCUboot when they arrive at the device.

[quote user="srubin-ns"]Will you please confirm that there is in fact working Azure IoT FOTA in the NCS? Has this actually been made to work with Azure?[/quote][quote user=""]Am I supposed to expose the update file(s) to the public? How are they protected such that only my device(s) can download them?[/quote]

The Azure FOTA library makes no assumptions on how the files are hosted and about security involved. It has been tested using publicly hosted file on Azure blob storage.

[quote user=""]Which update file(s) should be used? The zip (which contains the binary) or the manifest json (which would presumably instruct the code as to how to install the update)?[/quote]

Documentation provides information about output build files. In this case, zephyr.signed.bin should be used. Alternatively, you can use the same binary file from dfu_application.zip.

[quote user=""]Once the update file (zip? Bin? Json?) file is downloaded, does the FOTA library know how to apply it, i.e. reflash itself?[/quote]

When the download starts, the DFU target library used by FOTA download library will check what type of image it is downloading and handle it accordingly. For an application update, this means downloading the entire image to the secondary MCUboot slot and then attempt to use that image on subsequent reboot.

Best regards,
Dejan

RE: Azure IoT FOTA cannot download update images

dejans — Wed, 16 Apr 2025 09:26:11 GMT

Hi,

[quote user="srubin-ns"]

None of the nRF documentation or examples give any hint as to how to use the tokens. It was my understanding that this was all built into the Azure FOTA library.

Will you please confirm that there is in fact working Azure IoT FOTA in the NCS? Has this actually been made to work with Azure?

[/quote]

I will check this and get back to you by the end of next week.

Best regards,
Dejan

RE: Azure IoT FOTA cannot download update images

srubin-ns — Mon, 14 Apr 2025 17:07:38 GMT

dejans I am using v2.8.0. (I have also tried v2.9.9 with the same results).

I think I understand the idea of the SAS stuff you mentioned, but what's missing is that there is no token sent in the manifest, or maybe there is, but the FOTA download is not using it.

None of the nRF documentation or examples give any hint as to how to use the tokens. It was my understanding that this was all built into the Azure FOTA library.

Will you please confirm that there is in fact working Azure IoT FOTA in the NCS? Has this actually been made to work with Azure?

Thank you!

RE: Azure IoT FOTA cannot download update images

dejans — Mon, 14 Apr 2025 14:49:59 GMT

Hi,

Which NCS version do you use?

Have you tried to use Shared Access Signatures (SAS)? You can look at granting limited access using SAS delegating access using SAS, create account SAS, create service SAS and service SAS examples, authorize with shared key, anonymous read access (for testing, presents security risk).

Best regards,
Dejan