Device onboarding: "certificate already exists"

[teba99]

Hi,

We have onboarded several hundred nrRF9151 devices using the nRF Cloud "bulk onboard" UI (preconnect onboarding using device_credentials_installer.py). Generally, this works fine.

However, for two devices we are getting an error during onboarding: "certificate already exists". But the respective devices (UUID) are not present in nRF Cloud in any of our teams.

We're not sure why this is happening and how to resolve the situation and finish onboarding the two devices.

Any advice is appreciated.

Thanks

[Markku Lehto]

Hi Terrence,

We need to investigate what might be the reason for "certificate already exists" error message. Could you give us device UUIDs for those two devices you had issues with it?

Also, I assume you are using https://github.com/nRFCloud/utils?tab=readme-ov-file#how-to-registering-devices-quickly to register your devices. Also, if you could add those certificates to this ticket as well which caused the error message. 

Thank you.

[teba99]

Hi Markku,

Correct, we are using that method to register our devices. The two devices are 50343956-3037-43c5-8029-001906c2202a und 5034474b-3731-4fb9-8020-0713b6b5484e.

Thanks

[Markku Lehto]

Hi Terrence,

I searched devices from our database:

50343956-3037-43c5-8029-001906c2202a - could not be found

5034474b-3731-4fb9-8020-0713b6b5484e - registered to team id: 25c3f2c9-732a-45c6-a580-c3b0f327af99. Is that yours?

 

Best regards,

Markku Lehto

[teba99]

Hi,

50343956-3037-43c5-8029-001906c2202a: We verified this is correct and tried onboarding again, but it continues to fail.

5034474b-3731-4fb9-8020-0713b6b5484e: Yes, 25c3f2c9-732a-45c6-a580-c3b0f327af99 is one of our teams, but this device is not listed in the team. So we can't remove it.

Thanks

[Markku Lehto]

Hi,

ok I will removed 50343956-3037-43c5-8029-001906c2202a and 5034474b-3731-4fb9-8020-0713b6b5484e from the our registry again.

If it continues to fail to onboard these devices, could you send those two certificates for these two devices to me? I suspect the issue is related to these certificates.

If you could upload these certificates in PEM format to this ticket, I would be able to check them.

Thank you,

Markku Lehto 

 

[teba99]

Hi,

We retried onboarding, but it still fails. Certificates attached.

Thanks

certs.zip

[Markku Lehto]

Thanks Terrence,

I will troubleshoot this further.

-M

[Markku Lehto]

Hi,

It seems that those two certificates were already registered in our system. For some reason they were orphaned, so no device was attached to them.

I removed both of those certificates which seems to be from some earlier onboarding session. You should be good to go to onboard these two devices now.

In case you still have issues, please reopen this ticket.

Thank you for using nRF Cloud.

Best regards,

Markku Lehto