Azure IoT Hub DPS – CSR-based certificate signing support?

Question

Hi everyone, 
 I’m looking for an option to avoid signing the device Certificate Signing Request (CSR) locally and I was wondering if Azure had an option. I have fund this Certificate signing request requirements in Device Provisioning Service and it seems to be exactly what I need. Questions: 
 
 Is there anyone that has experience with it? 
 Is it supported by nrf Connect SDK or Plain Zephyr? 
 Will it be support and what is the timeline for that? 
 
 Thank you in advance.

Simon D-M · Accepted Answer

Hi, 
 From my understanding, with the current implantation of Azure DPS, it won't solve your issue concerning the fact that you need to sign the CSR locally. 
 However, Azure has recently launched a preview variant of certificate management involving CSRs, but our SDK don't support this new method natively. 
 Technically, our modem is capable of generating private keys and CSR so it should be possible to implement it if you want to try. 
 But basically, we don't have support for this new certificate management as for now. 
 Will it be support and what is the timeline for that? 
 Sorry, I am not allowed to give any information about our future plan. If you really want to have more information about it, I would recommend you checking directly with our sales department. 
 Best regards, 
 Simon D-M