How best to begin new nRF91 MQTT project connecting to AWS

[craig.goldman]

I am re-starting a project to send MQTT topics to AWS.  At this point, is MQTT_Simple still the best way to start and then modify the endpoint as suggested in case 224855 or would it be better to start with something like Asset_Tracker (or maybe something else)?  I am particularly concerned about the effort to add certificate and keys to MQTT_Simple code.

[Didrik Rokhaug]

nRF Cloud is built on AWS, but we have configured AWS for our use. I am not familiar enough with AWS to say how much impact this has, but I can not guarantee that all the upper layers of the nrf_cloud library work with your (or other) AWS setups.

To give an example:

A DK can be in several different states: It can be associated with a user account, it can be waiting for a user to input a sequence of button presses, etc.

When a DK connects to nRF Cloud, it receives a message informing it of what state it should be in. It will then decode the message, and perform the appropriate actions.

As your cloud implementation will have other requirements and uses, the received state might not make sense to the nrf_cloud library (leading to an error), or the corresponding action might not be what you want.

[Didrik Rokhaug]

craig.goldman said:

Should I also add "CONFIG_MQTT_LIB_TLS=y" to this file?

 Yes, you will need to add CONFIG_MQTT_LIB_TLS=y to your prj.conf.

 

craig.goldman said:

The "prj.conf" file under "mqtt_simple" does not contain CONFIG_NRF_CLOUD_PROVISION_CERTIFICATES; is it as easy as simply adding a new line or am I looking in the wrong "prj.conf" file?

 It is almost as simple as that. In addition to the adding CONFIG_NRF_CLOUD_PROVISION_CERTIFICATES (=y the first time you run the application, =n afterward to avoid flash wear) to prj.conf, you must also declare the configuration option in the Kconfig file. I.e., add the following lines (from <ncs>/nrf/subsys/net/lib/nrf_cloud) to the Kconfig file in your project folder (same folder as your prj.conf and CMakeLists.txt):

config NRF_CLOUD_PROVISION_CERTIFICATES
	bool "nRF Cloud library provision of certificate"
	help
		Enable run-time provisioning of certificates from the
		certificates header file selected by using NRF_CLOUD_CERTIFICATES_FILE

The text after "help" can be changed to something else, and I would remove NRF_CLOUD from the name of the configuration as you are no longer using it for nRF Cloud (you would, of course, have to change the name all places you are using it, i.e., in prj.conf and the provision function).

[craig.goldman]

Thank you for your help.  I'm sorry about the delay getting back to here.  Sometimes "Life Happens".

[Didrik Rokhaug]

You are welcome.

Just one note:

While the provisioning function is useful during development, you should avoid having your certificates present in the production binaries. A more secure way is to use the AT command AT%CMNG to write certificates. During development, you should also try to avoid unnecessary writing of your certificates, as this will wear out the flash.

Best regards,

Didrik