Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

Pascal Hdz — Fri, 29 Aug 2025 11:59:10 GMT

Good to know!

Pascal.

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

mackz — Fri, 29 Aug 2025 10:59:58 GMT

That fixed it!
Thank you for the help.

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

Pascal Hdz — Fri, 29 Aug 2025 10:11:05 GMT

Hello Marcus,

Could you try to cherry pick this improvement in NCS and try again?
https://github.com/nrfconnect/sdk-nrf/commit/1b20c0623f621d7867f08998e6e49b755316dc93
Let me know your results.
Pascal.

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

Pascal Hdz — Fri, 29 Aug 2025 09:36:33 GMT

Ok! Let us discuss it internally and I will try to get back to you on Monday.

Pascal.

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

mackz — Fri, 29 Aug 2025 09:32:30 GMT

I need atleast 4, i am connecting to a few different servers.

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

Pascal Hdz — Fri, 29 Aug 2025 09:31:05 GMT

Hello Marcus,

May I know if having that many sectags installed is something needed in your application or are you only planning to connect to nRF Cloud?

Pascal.

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

mackz — Thu, 28 Aug 2025 06:20:36 GMT

this is the output when i run device_credentials_installer with debug logs:

device_credentials_installer --ca self_*_ca.pem --ca-key self_*_prv.pem --id-str bsl- --id-imei -s -d --log-level debug --rtt --verify
DEBUG    > at AT+CGSN
DEBUG    < *** Booting nRF Connect SDK v3.5.99-ncs1-1 ***

Reset reason: software

MOSH version:       v2.6.1
MOSH build id:      custom
MOSH build variant: dev


DEBUG    < 
DEBUG    < mosh:~$ at AT+CGSN
DEBUG    < 351358814589500
DEBUG    < OK
DEBUG    Detected shell mode: True
INFO     Disabling LTE and GNSS...
DEBUG    > at 'AT+CFUN=4'
DEBUG    < at 'AT+CFUN=4'
DEBUG    < Modem domain event: Search done
DEBUG    < OK
DEBUG    > at 'AT+CGSN'
DEBUG    < at 'AT+CGSN'
DEBUG    < 351358814589500
DEBUG    < OK
INFO     Device IMEI: 351358814589500
DEBUG    > at 'AT+CGMR'
DEBUG    < at 'AT+CGMR'
DEBUG    < mfw_nrf9160_1.3.7
DEBUG    < OK
INFO     Modem FW version: mfw_nrf9160_1.3.7
INFO     Deleting sectag 16842753...
DEBUG    > at 'AT%CMNG=3,16842753,0'
DEBUG    < at 'AT%CMNG=3,16842753,0'
DEBUG    < OK
DEBUG    > at 'AT%CMNG=3,16842753,1'
DEBUG    < at 'AT%CMNG=3,16842753,1'
DEBUG    < OK
DEBUG    > at 'AT%CMNG=3,16842753,2'
DEBUG    < at 'AT%CMNG=3,16842753,2'
DEBUG    < OK
INFO     Generating private key and requesting a CSR for sectag 16842753...
DEBUG    > at 'AT%KEYGEN=16842753,2,0,"CN=bsl-351358814589500"'
DEBUG    < at 'AT%KEYGEN=16842753,2,0,"CN=bsl-351358814589500"'
DEBUG    < %KEYGEN: "<KEY>"
DEBUG    < OK
DEBUG    CSR blob: "<KEY>"
INFO     Parsing AT%KEYGEN output:
INFO     -----BEGIN CERTIFICATE REQUEST-----<KEY>-----END CERTIFICATE REQUEST-----\n
INFO     Device public key: -----BEGIN PUBLIC KEY-----<KEY>-----END PUBLIC KEY-----\n
INFO     SHA256 Digest: 5dbd4a1f37e72e3dc13c550f69febed0c05c11fa6517e0fc02475f941698d8b8
INFO     * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
INFO     COSE:
INFO       Prot Hdr:   1 : -7 (ECDSA w/ SHA-256)
INFO       Unprot Hdr: 4 : -2 (identity_key)
INFO       ---------------
INFO       Attestation:
INFO         Payload ID: CSR_msg_v1
INFO         Dev UUID:   50305831-3237-4d44-8045-220ed4a9be95
INFO         sec_tag:    16842753
INFO         SHA256:     5dbd4a1f37e72e3dc13c550f69febed0c05c11fa6517e0fc02475f941698d8b8
INFO         Nonce:      f66db040d175a935e32edf23e66de09c
INFO       ---------------
INFO       Sig:
INFO           537d8e4e7311faa7353a3361ffd8f842f79cc3f7dfa8611c66492b6a803224f7cb7100c7324c6fdbf7ed57a519637ad029c94185eb8b80673cc812646d959d83
INFO     COSE digest matches payload
INFO     * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
INFO     File created: nrf_provisioning/bsl-351358814589500_csr.pem
INFO     Device ID: bsl-351358814589500
DEBUG    CSR PEM: b'-----BEGIN CERTIFICATE REQUEST-----<KEY>-----END CERTIFICATE REQUEST-----\n'
DEBUG    Pub key: b'-----BEGIN PUBLIC KEY-----<KEY>-----END PUBLIC KEY-----\n'
INFO     Loading CA and key...
INFO     Creating device certificate...
DEBUG    Dev cert: b'-----BEGIN CERTIFICATE-----<KEY>-----END CERTIFICATE-----\n'
INFO     Saving dev cert...
INFO     File created: nrf_provisioning/bsl-351358814589500_crt.pem
DEBUG    Pub key: b'-----BEGIN PUBLIC KEY-----<KEY>-----END PUBLIC KEY-----\n'
INFO     Saving pub key...
INFO     File created: nrf_provisioning/bsl-351358814589500_pub.pem
INFO     Writing CA cert(s) to device...
DEBUG    > at 'AT%CMNG=0,16842753,0,"-----BEGIN CERTIFICATE-----<KEY>-----END CERTIFICATE-----\n"'
DEBUG    < at 'AT%CMNG=0,16842753,0,"-----BEGIN CERTIFICATE-----<KEY>-----END CERTIFICATE-----\n"'
DEBUG    < OK
INFO     Writing dev cert to device...
DEBUG    > at 'AT%CMNG=0,16842753,1,"-----BEGIN CERTIFICATE-----<KEY>-----END CERTIFICATE-----\n"'
DEBUG    < at 'AT%CMNG=0,16842753,1,"-----BEGIN CERTIFICATE-----<KEY>-----END CERTIFICATE-----\n"'
DEBUG    < OK
INFO     Verifying credentials...
INFO     Verifying CA Cert
DEBUG    > at 'AT%CMNG=1,16842753,0'
DEBUG    < at 'AT%CMNG=1,16842753,0'
DEBUG    < %CMNG: 16842753,0,"0359B70CF6209FBC619243F8B2678C480D8B50F5B0D76399978F49527C2CA066"
DEBUG    < OK
ERROR    CA Cert - SHA mismatch:
ERROR    	Device    : 0359B70CF6209FBC619243F8B2678C480D8B50F5B0D76399978F49527C2CA066
ERROR    	Calculated: 56AE01E6773BDAEC4BFB216D4005ADB06E4F680BD8BFB8BE4C683CE921681897
ERROR    Credential verification: FAIL

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

mackz — Thu, 28 Aug 2025 06:03:27 GMT

I get the same error if i try it on another device.

I can't use /dev/ttyACM0 since i am using rtt but if i switch it for RTT i get:

nrfcredstore rtt --debug list 
DEBUG:nrfcredstore.comms:> at AT+CGSN
DEBUG:nrfcredstore.comms:< *** Booting nRF Connect SDK v3.5.99-ncs1-1 ***

Reset reason: software

MOSH version:       v2.6.1
MOSH build id:      custom
MOSH build variant: dev


DEBUG:nrfcredstore.comms:< 
DEBUG:nrfcredstore.comms:< mosh:~$ at AT+CGSN
DEBUG:nrfcredstore.comms:< 351358814589500
DEBUG:nrfcredstore.comms:< OK
DEBUG:nrfcredstore.comms:> at 'AT+CMEE=1'
DEBUG:nrfcredstore.comms:< at 'AT+CMEE=1'
DEBUG:nrfcredstore.comms:< OK
DEBUG:nrfcredstore.comms:> at 'AT+CFUN=4'
DEBUG:nrfcredstore.comms:< at 'AT+CFUN=4'
DEBUG:nrfcredstore.comms:< Modem domain event: Search done
DEBUG:nrfcredstore.comms:< OK
DEBUG:nrfcredstore.comms:> at 'AT%CMNG=1'
DEBUG:nrfcredstore.comms:< at 'AT%CMNG=1'
DEBUG:nrfcredstore.comms:< Cutting too long string while printing...
DEBUG:nrfcredstore.comms:< %CMNG: 0,6,"0606060606060606060606060606060606060606060606060606060606060606"
DEBUG:nrfcredstore.comms:< %CMNG: 50,0,"2C43952EE9E000FF2ACC4E2ED0897C0A72AD5FA72C3D934E81741CBD54F05BD1"
DEBUG:nrfcredstore.comms:< %CMNG: 16842753,0,"0359B70CF6209FBC619243F8B2678C480D8B50F5B0D76399978F49527C2CA066"
DEBUG:nrfcredstore.comms:< %CMNG: 16842753,1,"D4797CCAB5C54474FF237163850B079D307923324FE2882709C96B3E3EBD89FC"
DEBUG:nrfcredstore.comms:< %CMNG: 16842753,2,"C01348F244C77E2855D97DEAB7F3A9C70E8803FBC93C9271701AAC446D241920"
DEBUG:nrfcredstore.comms:< %CMNG: 16842754,0,"ED8C75981CEB97D3D88FCB774FF58821B0EE8773989DB7339DCB73254379CFAF"
DEBUG:nrfcredstore.comms:< %CMNG: 16842754,1,"500C34BC277B95A220A3EA6C6AE0D28469C44E65D3DC0B49E53460F2D5FDCE22"
DEBUG:nrfcredstore.comms:< %CMNG: 16842754,2,"FE177C73E8E4C10D647DEA6A4E62BC9331A8AAD125C77BF5358A0848802F1DBB"
DEBUG:nrfcredstore.comms:< %CMNG: 16842755,0,"0359B70CF6209FBC619243F8B2678C480D8B50F5B0D76399978F49527C2CA066"
DEBUG:nrfcredstore.comms:< %CMNG: 16842755,1,"39BF0D0954A8EF8911E2A5C2B9204AEABB2D252EA3711BD000B22B6579E1CB57"
DEBUG:nrfcredstore.comms:< %CMNG: 16842755,2,"EEE25688664C9332AF43F3003497DE13637535DA50F22D3F93754800648EDF33"
DEBUG:nrfcredstore.comms:< %CMNG: 16842760,0,"0359B70CF6209FBC619243F8B2678C480D8B50F5B0D76399978F49527C2CA066"
DEBUG:nrfcredstore.comms:< %CMN
Traceback (most recent call last):
  File ".local/bin/nrfcredstore", line 8, in <module>
    sys.exit(run())
  File ".local/lib/python3.10/site-packages/nrfcredstore/cli.py", line 164, in run
    main(args, CredStore(cred_if))
  File ".local/lib/python3.10/site-packages/nrfcredstore/cli.py", line 139, in main
    exec_cmd(args, credstore)
  File ".local/lib/python3.10/site-packages/nrfcredstore/cli.py", line 88, in exec_cmd
    creds = credstore.list(args.tag, ct)
  File ".local/lib/python3.10/site-packages/nrfcredstore/credstore.py", line 63, in list
    raise RuntimeError("Failed to list credentials")
RuntimeError: Failed to list credentials

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

Pascal Hdz — Wed, 27 Aug 2025 16:36:25 GMT

Hello,

Could you run and share the output?

nrfcredstore /dev/ttyACM0 list

Have you tried with another device?

Pascal.

RE: Onboarding and connnecting custom nrf9160 board to nRF Cloud fails

mackz — Wed, 27 Aug 2025 09:41:51 GMT

I can also add that the board shows up under Devices on my nrf cloud account with the subtype:

unknown-pre-onboarding