Create Azure IoT Hub certificates

RE: Create Azure IoT Hub certificates

cvt1982 — Tue, 27 Oct 2020 20:42:40 GMT

Hi Øyvind

I still don't get the overall picture of the Baltimore CyberTrust Root CA, and that we then have a self-signed certificate that is verified through Azure - and which is then used to create a client certificate and private key.

For instance you and Azure again and again say that the certGen.sh tool is not for production but only testing, but nowhere I see a step by step guide to doing the certGen.sh steps for a production. This would be nice to add to your description to help developers and companies to make secure products.

All that said the inputs from your developer gave some clear sight. So I was finally able to successfully connect to Azure.

As you can see below I get telemetry telegrams sent to Azure:

The telemetry can be seen in the Azure IoT Explorer

And in the same way I'm able to send direct messages to lite the led on the board

I might add some extra inputs for the incident over the coming days to give other the step-by-step guide to do what I just did... maybe something you can add to the general description (up to you).

RE: Create Azure IoT Hub certificates

Øyvind — Tue, 27 Oct 2020 12:56:38 GMT

Hi Carsten,

Yes, I have gotten some feedback, that I hope will help. First of all our developers see that the documentation needs to be rewritten.

Further more, I got this:

From the screenshot it looks like the CA cert is wrong, it should be Baltimore CyberTrust Roort CA
Baltimore shall not be uploaded to Azure IoT Hub
After running the scripts in the guide the customer mentions, only the generated root certificate (for testing and dev only) must be uploaded and verified. It looks like the customer has succeeded doiung that.
If the customer has gone through all the steps in the guide, these certificates and keys should be provisioned:
- CA certificate: Baltimore CyberTrust Root CA
- Client certificate: certs/new-device.cert.pem
- Private key: private/new-device.key.pem

RE: Create Azure IoT Hub certificates

cvt1982 — Tue, 27 Oct 2020 10:53:24 GMT

Hi Øyvind,

Any news on the topic?

BR,

Carsten

RE: Create Azure IoT Hub certificates

Øyvind — Mon, 26 Oct 2020 12:00:36 GMT

Hi Carsten,

I see what you mean. This does not look like a straight forward process, and note that this sample is on our master branch, which can be somewhat unstable/not fully tested. I have not tested this sample before, let me test it here and see if I can get through it. If I'm not able to get it working I will discuss with the developer.

Kind regards,
Øyvind