Sample nRF9160: Azure IoT Hub

Question

I created an Azure IOT Hub and simulated a X.509 device using C and device SDK for Azure . 
 No problems here. 
 
 Then I run sample nRF9160: Azure Iot Hub and receive the following error

Now I look for some guidance to troubleshot the mqtt_connect error. 
 
 First: 
 Can Nordic please clarify the certificate requirements mentioned on page Azure IoT Hub — nRF Connect SDK 1.3.99 documentation in more detail.

Does Baltimore CyperTrust Root certificate equate to file RootCA.pem ? 
 
 Does Device certificate equate to file mydevice-public.pem ? 
 Does Private key equate to file mydevice-private.pem ? 
 
 Files under the ..\ azure-iot-sdk-c	ools\CACertificates directory listed here:

Second: 
 How does one best investigates mqtt_connect errors ?

Martin Lesund · Accepted Answer

Hi Apfelsine, Still looks like there some issues with the certificates unfortunately. You can find the Baltimore CyberTrust Root certificate by following the link in the instructions here . The Server-certificate is this. The RootCA.pem that you mention is probably the generated certificate, that should be uploaded to the IoT Hub. "Does Private key equate to file mydevice-private.pem ?" - Yes "Does Device certificate equate to file mydevice-public.pem ?" - I think this needs to be chained with the intermediate-certificate.e.g. -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -----END CERTIFICATE-----

Martin Lesund · Answer

Hi Sabine, In our docs about Azure we point to this link to get the certificates. In that page there is a link to "Managing test CA certificates for samples and tutorials" which has the scripts used and the explanations you are looking for. So the following is needed to get it to work with PowerShell-generated certs: CA certificate: Baltimore CyberTrust Root certificate Client certificate: -public.pem Private key: -private.pem "RootCA.pem" has to be uploaded to the IoT Hub and verified. For bash-generated certs, then the following is needed: CA certificate: Baltimore CyberTrust Root certificate Client certificate: certs/new-device.cert.pem Private key: private/new-device.key "certs/azure-iot-test-only.root.ca.cert.pem" has to be uploaded to IoT Hub and verified. Best regards, Martin L.

Sample nRF9160: Azure IoT Hub

Top Replies