Azure IoT Hub DPS – CSR-based certificate signing support?

[Replay]

Hi everyone,

I’m looking for an option to avoid signing the device Certificate Signing Request (CSR) locally and I was wondering if Azure had an option.

I have fund this Certificate signing request requirements in Device Provisioning Service and it seems to be exactly what I need.

Questions:

1. Is there anyone that has experience with it?
2. Is it supported by nrf Connect SDK or Plain Zephyr?
3. Will it be support and what is the timeline for that?

Thank you in advance.

[Simon D-M]

Hi,

We have support for Azure Device Provisioning Service (link). However, I'm not sure if their provisioning service is able to sign the CSR.

I know that our devices can do it, as we are doing it on our nRF Cloud with our provisioning service. 

I'll look into more detail tomorrow, and I'll come back to you. 

Best regards,

Simon D-M

[Simon D-M]

Hi,

From my understanding, with the current implantation of Azure DPS, it won't solve your issue concerning the fact that you need to sign the CSR locally. 

However, Azure has recently launched a preview variant of certificate management involving CSRs, but our SDK don't support this new method natively. 

Technically, our modem is capable of generating private keys and CSR so it should be possible to implement it if you want to try.

But basically, we don't have support for this new certificate management as for now.

Will it be support and what is the timeline for that?

Sorry, I am not allowed to give any information about our future plan. If you really want to have more information about it, I would recommend you checking directly with our sales department.

Best regards,

Simon D-M

[Replay]

Hi Simon,

Thank you for your help that was all I was looking for, I really appreciate it.

Have a great day.