Hi, i am trying to onboard our custom board using a nrf9160 to nRF Cloud using this guide:
https://docs.nordicsemi.com/bundle/ncs-latest/page/nrf/samples/cellular/nrf_cloud_multi_service/README.html#nrf-cloud-multi-service-standard-onboarding
I am using nRF Connect SDK 2.6.1 and nrfcloud-utils version: 3.0.5
First i create the certs:
nrf_provisioning$ create_ca_cert -c SE -f self_ INFO Creating self-signed CA certificate... INFO File created: nrf_provisioning/self_0x61d993f61b85c792fd81564b068496dd6ff523ca_ca.pem INFO File created: nrf_provisioning/self_0x61d993f61b85c792fd81564b068496dd6ff523ca_prv.pem INFO File created: nrf_provisioning/self_0x61d993f61b85c792fd81564b068496dd6ff523ca_pub.pem
Since our board uses RTT i flash the modem shell sample with rtt overlay
this is the board config:
CONFIG_USE_SEGGER_RTT=y CONFIG_RTT_CONSOLE=y CONFIG_UART_CONSOLE=n CONFIG_SHELL_BACKEND_RTT=y CONFIG_SHELL_PROMPT_RTT="mosh:~$ " CONFIG_SHELL_BACKEND_SERIAL=n CONFIG_DK_LIBRARY=n # Enable modem-based JSON Web Token (JWT) generation required for nRF Cloud authentication CONFIG_MODEM_JWT=y CONFIG_NRF_CLOUD_SEC_TAG=16842753 CONFIG_NRF_CLOUD_CLIENT_ID_SRC_IMEI=y CONFIG_NRF_CLOUD_CLIENT_ID_PREFIX="bsl-" CONFIG_HW_ID_LIBRARY=y CONFIG_HW_ID_LIBRARY_SOURCE_UUID=y
But when i run:
device_credentials_installer --ca self_*_ca.pem --ca-key self_*_prv.pem --id-str bsl- --id-imei -s -d --verify --rtt
i get:
INFO Disabling LTE and GNSS... INFO Device IMEI: 351358814589500 INFO Modem FW version: mfw_nrf9160_1.3.7 INFO Deleting sectag 16842753... INFO Generating private key and requesting a CSR for sectag 16842753... INFO Parsing AT%KEYGEN output: INFO -----BEGIN CERTIFICATE REQUEST----- <KEY> ----END PUBLIC KEY-----\n INFO SHA256 Digest: c840c81a3f9b5593c7e4a65d56dcc953aafb67f457af96e5f3ee71cbde40cb8a INFO * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * INFO COSE: INFO Prot Hdr: 1 : -7 (ECDSA w/ SHA-256) INFO Unprot Hdr: 4 : -2 (identity_key) INFO --------------- INFO Attestation: INFO Payload ID: CSR_msg_v1 INFO Dev UUID: 50305831-3237-4d44-8045-220ed4a9be95 INFO sec_tag: 16842753 INFO SHA256: c840c81a3f9b5593c7e4a65d56dcc953aafb67f457af96e5f3ee71cbde40cb8a INFO Nonce: 90e7195ed1d1452fed1522e1441e0492 INFO --------------- INFO Sig: INFO 5635351893da5741a95428afc1dc2921661a2fa562ce02cb7cbbdaa5ca9533eec97c777b1abc4e6f7ce97976e5f676dadf5fc6aa162747e6015c8492c518d727 INFO COSE digest matches payload INFO * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * INFO File created: nrf_provisioning/bsl-351358814589500_csr.pem INFO Device ID: bsl-351358814589500 INFO Loading CA and key... INFO Creating device certificate... INFO Saving dev cert... INFO File created: nrf_provisioning/bsl-351358814589500_crt.pem INFO Saving pub key... INFO File created: nrf_provisioning/bsl-351358814589500_pub.pem INFO Writing CA cert(s) to device... INFO Writing dev cert to device... INFO Verifying credentials... INFO Verifying CA Cert ERROR CA Cert - SHA mismatch: ERROR Device : 0359B70CF6209FBC619243F8B2678C480D8B50F5B0D76399978F49527C2CA066 ERROR Calculated: 56AE01E6773BDAEC4BFB216D4005ADB06E4F680BD8BFB8BE4C683CE921681897 ERROR Credential verification: FAIL
If i skip the --verify option when running device_credentials_installer i get:
INFO Disabling LTE and GNSS... INFO Device IMEI: 351358814589500 INFO Modem FW version: mfw_nrf9160_1.3.7 INFO Deleting sectag 16842753... INFO Generating private key and requesting a CSR for sectag 16842753... INFO Parsing AT%KEYGEN output: INFO -----BEGIN CERTIFICATE REQUEST----------END CERTIFICATE REQUEST----- INFO Device public key: -----BEGIN PUBLIC KEY----------END PUBLIC KEY----- INFO SHA256 Digest: 644a2bbf3139f66e40d8fdb0140dd51c93d8130c49df480ae71ae8266926556e INFO * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * INFO COSE: INFO Prot Hdr: 1 : -7 (ECDSA w/ SHA-256) INFO Unprot Hdr: 4 : -2 (identity_key) INFO --------------- INFO Attestation: INFO Payload ID: CSR_msg_v1 INFO Dev UUID: 50305831-3237-4d44-8045-220ed4a9be95 INFO sec_tag: 16842753 INFO SHA256: 644a2bbf3139f66e40d8fdb0140dd51c93d8130c49df480ae71ae8266926556e INFO Nonce: bc61ef61e35719c2829c942323b19e49 INFO --------------- INFO Sig: INFO e3d17be7a36d354bd057c7ddbcf576fed16f6dc51c4b6a860294292e610deb5e73b544511425a20e6114359a3fd43b3bbc4795f60d4c4620152af9b6c7d85161 INFO COSE digest matches payload INFO * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * INFO File created: nrf_provisioning/bsl-351358814589500_csr.pem INFO Device ID: bsl-351358814589500 INFO Loading CA and key... INFO Creating device certificate... INFO Saving dev cert... INFO File created: nrf_provisioning/bsl-351358814589500_crt.pem INFO Saving pub key... INFO File created: nrf_provisioning/bsl-351358814589500_pub.pem INFO Writing CA cert(s) to device... INFO Writing dev cert to device... INFO Saving nRF Cloud device onboarding CSV file onboard.csv... INFO Onboarding CSV file saved, row count: 1
and i can run the onboarding and it is accepted:
nrf_cloud_onboard --api-key your_api_key --csv onboard.csv
INFO Devices to be onboarded: 1 INFO Onboarding API call result: 202 - Accepted INFO Fetching results for bulkOpsRequestId: 01K3NCHRMK8WE7DG1FC16KQDRV INFO Waiting 5s... INFO Onboarding status: SUCCEEDED INFO CSV-formatted results: INFO bulkOpsRequestId,01K3NCHRMK8WE7DG1FC16KQDRV endpoint,ONBOARD_DEVICES status,SUCCEEDED requestedAt,2025-08-27T09:08:10.515Z completedAt,2025-08-27T09:08:11.550Z uploadedDataUrl,https://bulk-ops-requests.nrfcloud.com/649cf48a-3cc3-4a0f-9543-d2db16d2777d/onboard_devices/01K3NCHRMK8WE7DG1FC16KQDRV.csv Error count,0 Device ID,Result bsl-351358814589500,OK
But when i then flash the nrf cloud multi service sample the connection fails:
[00:00:00.280,120] <inf> main: nRF Cloud multi-service sample has started, version: 1.0.0, protocol: MQTT [00:00:00.280,609] <inf> cloud_connection: Enabling connectivity... [00:00:00.281,402] <dbg> message_queue: consume_device_message: Consuming an enqueued device message [00:00:00.549,224] <inf> cloud_connection: Setting up nRF Cloud library... [00:00:04.288,421] <inf> cloud_connection: Waiting for network ready... [00:00:07.401,489] <inf> cloud_connection: Network connectivity gained! [00:00:08.469,055] <inf> cloud_connection: Network is ready [00:00:08.525,573] <inf> cloud_connection: Connecting to nRF Cloud [00:00:08.588,409] <inf> cloud_connection: Device ID: bsl-351358814589500 [00:00:08.657,531] <dbg> cloud_connection: cloud_event_handler: NRF_CLOUD_EVT_TRANSPORT_CONNECTING [00:00:09.161,346] <dbg> cloud_connection: cloud_event_handler: NRF_CLOUD_EVT_TRANSPORT_CONNECT_ERROR: -9 [00:00:09.259,674] <dbg> cloud_connection: clear_readiness_timeout: Stopping cloud connection readiness timeout [00:00:09.363,861] <inf> cloud_connection: Disconnecting from nRF Cloud [00:00:09.431,182] <dbg> cloud_connection: disconnect_cloud: Already disconnected from nRF Cloud [00:00:09.521,911] <err> cloud_connection: Could not connect to nRF Cloud
Am i missing something?
