Problems with programming device certificates from the AWS IoT console.

[Jacek Majda]

I did download the device certificates from the AWS IoT console into a directory: C:\Nordic  on my PC.

However, my attempts to copy and paste these device certificates from the directory C:\Nordic on my PC to the respective entries (CA Certificate, Client Certificate and Private Key) on the Certificate Manager of the LTE Link Monitor were unsuccessful. No response at all...

Also, when you open the Certificate Manager in the LTE Link Monitor, you see the following note: "Use security tag 16842753 to manage nRF Connect for Cloud certificate, otherwise pick a different tag".   So, which security tag shall be used to manage the AWS IoT certificates?

I am using:

1. nRF9160DK v1.0.1

2. Windows 10 Pro OS, version: 20H2, OS build:19042.631

3. nRF Connect v 3.7.0

4. nRF Connect SDK v1.6.1

Regards,

Jacek

[Jacek Majda]

1. I did double-check and subsequently I corrected the entry for the configuration of the AWS IoT broker, using the address string found under "Rest API Endpoint" in the AWS IoT Console under: IoT core>Manage>things>interact.

2. I double-checked and I corrected the entry for the configuration of the  AWS_IoT_Client_ID_Static, using the name of the thing as it appears in the AWS IoT Console under: IoT core>Manage>things.

3. I double-checked that the entry for the configuration of the AWS_IOT_SEC_TAG is 201.

However, after I have built the the AWS_iot sample and I tried to run it, the following error messages appeared on the LTE Link Monitor every 30 seconds:

AWS_IOT_EVT_CONNECTING

connection_poll_start  failed, error:-119

aws_iot_connect, error:-119

Next connection retry in 30 seconds

AWS_IOT_EVT_DISCONNECTED

Next connection retry in 30 seconds

as can be seen on the attached log file from the LTE Link Monitor.

Fullscreen 2021-09-21 LTE Link Monitor log file.txt Download

2021-09-21T15:20:02.349Z INFO Application data folder: C:\Users\Administrator\AppData\Roaming\nrfconnect\pc-nrfconnect-linkmonitor
2021-09-21T15:20:02.663Z DEBUG App pc-nrfconnect-linkmonitor v1.1.10 official
2021-09-21T15:20:02.664Z DEBUG App path: C:\Users\Administrator\.nrfconnect-apps\node_modules\pc-nrfconnect-linkmonitor
2021-09-21T15:20:02.664Z DEBUG nRFConnect 3.7.0, required by the app is (^3.6.0)
2021-09-21T15:20:02.664Z DEBUG nRFConnect path: C:\Users\Administrator\AppData\Local\Programs\nrfconnect\resources\app.asar
2021-09-21T15:20:02.665Z DEBUG HomeDir: C:\Users\Administrator
2021-09-21T15:20:02.665Z DEBUG TmpDir: C:\Users\ADMINI~1\AppData\Local\Temp
2021-09-21T15:20:03.051Z VERBOSE Could not fetch serial number for serial port at COM3
2021-09-21T15:20:43.493Z INFO Modem port is opened
2021-09-21T15:20:47.828Z DEBUG modem << *** Booting Zephyr OS build v2.6.0-rc1-ncs1  ***
2021-09-21T15:20:47.866Z DEBUG modem << I: Starting bootloader
2021-09-21T15:20:48.009Z DEBUG modem << I: Primary image: magic=unset, swap_type=0x1, copy_done=0x3, image_ok=0x3
2021-09-21T15:20:48.012Z DEBUG modem << I: Secondary image: magic=unset, swap_type=0x1, copy_done=0x3, image_ok=0x3
2021-09-21T15:20:48.017Z DEBUG modem << I: Boot source: none
2021-09-21T15:20:48.021Z DEBUG modem << I: Swap type: none
2021-09-21T15:20:48.024Z DEBUG modem << I: Bootloader chainload address offset: 0x10000
2021-09-21T15:20:48.026Z DEBUG modem << I: Jumping to the first image slot
2021-09-21T15:20:48.161Z DEBUG modem << *** Booting Zephyr OS build v2.6.0-rc1-ncs1  ***
2021-09-21T15:20:48.167Z DEBUG modem << Flash regionsDomainPermissions
2021-09-21T15:20:48.172Z DEBUG modem << 00 03 0x00000 0x20000 Securerwxl
2021-09-21T15:20:48.176Z DEBUG modem << 04 31 0x20000 0x100000 Non-Securerwxl
2021-09-21T15:20:48.185Z DEBUG modem << Non-secure callable region 0 placed in flash region 3 with size 32.
2021-09-21T15:20:48.228Z DEBUG modem << SRAM regionDomainPermissions
2021-09-21T15:20:48.237Z DEBUG modem << 00 07 0x00000 0x10000 Securerwxl
2021-09-21T15:20:48.244Z DEBUG modem << 08 31 0x10000 0x40000 Non-Securerwxl
2021-09-21T15:20:48.247Z DEBUG modem << PeripheralDomainStatus
2021-09-21T15:20:48.250Z DEBUG modem << 00 NRF_P0               Non-SecureOK
2021-09-21T15:20:48.252Z DEBUG modem << 01 NRF_CLOCK            Non-SecureOK
2021-09-21T15:20:48.253Z DEBUG modem << 02 NRF_RTC0             Non-SecureOK
2021-09-21T15:20:48.256Z DEBUG modem << 03 NRF_RTC1             Non-SecureOK
2021-09-21T15:20:48.258Z DEBUG modem << 04 NRF_NVMC             Non-SecureOK
2021-09-21T15:20:48.268Z DEBUG modem << 05 NRF_UARTE1           Non-SecureOK
2021-09-21T15:20:48.272Z DEBUG modem << 06 NRF_UARTE2           SecureSKIP
2021-09-21T15:20:48.275Z DEBUG modem << 07 NRF_TWIM2            Non-SecureOK
2021-09-21T15:20:48.299Z DEBUG modem << 08 NRF_SPIM3            Non-SecureOK
2021-09-21T15:20:48.302Z DEBUG modem << 09 NRF_TIMER0           Non-SecureOK
2021-09-21T15:20:48.304Z DEBUG modem << 10 NRF_TIMER1           Non-SecureOK
2021-09-21T15:20:48.308Z DEBUG modem << 11 NRF_TIMER2           Non-SecureOK
2021-09-21T15:20:48.309Z DEBUG modem << 12 NRF_SAADC            Non-SecureOK
2021-09-21T15:20:48.311Z DEBUG modem << 13 NRF_PWM0             Non-SecureOK
2021-09-21T15:20:48.312Z DEBUG modem << 14 NRF_PWM1             Non-SecureOK
2021-09-21T15:20:48.313Z DEBUG modem << 15 NRF_PWM2             Non-SecureOK
2021-09-21T15:20:48.319Z DEBUG modem << 16 NRF_PWM3             Non-SecureOK
2021-09-21T15:20:48.321Z DEBUG modem << 17 NRF_WDT              Non-SecureOK
2021-09-21T15:20:48.323Z DEBUG modem << 18 NRF_IPC              Non-SecureOK
2021-09-21T15:20:48.325Z DEBUG modem << 19 NRF_VMC              Non-SecureOK
2021-09-21T15:20:48.353Z DEBUG modem << 20 NRF_FPU              Non-SecureOK
2021-09-21T15:20:48.356Z DEBUG modem << 21 NRF_EGU1             Non-SecureOK
2021-09-21T15:20:48.357Z DEBUG modem << 22 NRF_EGU2             Non-SecureOK
2021-09-21T15:20:48.361Z DEBUG modem << 23 NRF_DPPIC            Non-SecureOK
2021-09-21T15:20:48.362Z DEBUG modem << 24 NRF_REGULATORS       Non-SecureOK
2021-09-21T15:20:48.363Z DEBUG modem << 25 NRF_PDM              Non-SecureOK
2021-09-21T15:20:48.366Z DEBUG modem << 26 NRF_I2S              Non-SecureOK
2021-09-21T15:20:48.368Z DEBUG modem << 27 NRF_GPIOTE1          Non-SecureOK
2021-09-21T15:20:48.370Z DEBUG modem << SPM: NS image at 0x20200
2021-09-21T15:20:48.372Z DEBUG modem << SPM: NS MSP at 0x2001f660
2021-09-21T15:20:48.373Z DEBUG modem << SPM: NS reset vector at 0x26039
2021-09-21T15:20:48.374Z DEBUG modem << SPM: prepare to jump to Non-Secure image.
2021-09-21T15:20:48.375Z DEBUG modem << *** Booting Zephyr OS build v2.6.0-rc1-ncs1  ***
2021-09-21T15:20:48.385Z DEBUG modem << The AWS IoT sample started, version: v1.0.0
2021-09-21T15:20:50.426Z DEBUG modem << LTE cell changed: Cell ID: 161454349, Tracking area: 21001
2021-09-21T15:20:51.160Z DEBUG modem << RRC mode: Connected
2021-09-21T15:20:57.934Z DEBUG modem << RRC mode: Idle
2021-09-21T15:21:08.440Z DEBUG modem << RRC mode: Connected
2021-09-21T15:21:15.261Z DEBUG modem << Network registration status: Connected - home network
2021-09-21T15:21:15.282Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:21:15.296Z DEBUG modem << PSM parameter update: TAU: 3600, Active time: -1
2021-09-21T15:21:15.300Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:21:15.958Z DEBUG modem << DATE_TIME_OBTAINED_NTP
2021-09-21T15:21:45.265Z DEBUG modem << W: connection_poll_start failed, error: -119
2021-09-21T15:21:45.303Z DEBUG modem << aws_iot_connect, error: -119
2021-09-21T15:21:45.309Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:22:04.956Z DEBUG modem << AWS_IOT_EVT_DISCONNECTED
2021-09-21T15:22:15.274Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:22:15.301Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:22:45.277Z DEBUG modem << W: connection_poll_start failed, error: -119
2021-09-21T15:22:45.312Z DEBUG modem << aws_iot_connect, error: -119
2021-09-21T15:22:45.316Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:22:47.606Z DEBUG modem << AWS_IOT_EVT_DISCONNECTED
2021-09-21T15:23:15.285Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:23:15.318Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:23:45.285Z DEBUG modem << W: connection_poll_start failed, error: -119
2021-09-21T15:23:45.321Z DEBUG modem << aws_iot_connect, error: -119
2021-09-21T15:23:45.325Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:23:58.674Z DEBUG modem << AWS_IOT_EVT_DISCONNECTED
2021-09-21T15:24:15.294Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:24:15.316Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:24:41.556Z DEBUG modem << AWS_IOT_EVT_DISCONNECTED
2021-09-21T15:24:45.295Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:24:45.313Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:25:06.342Z DEBUG modem << *** Booting Zephyr OS build v2.6.0-rc1-ncs1  ***
2021-09-21T15:25:06.352Z DEBUG modem << I: Starting bootloader
2021-09-21T15:25:06.355Z DEBUG modem << I: Primary image: magic=unset, swap_type=0x1, copy_done=0x3, image_ok=0x3
2021-09-21T15:25:06.367Z DEBUG modem << I: Secondary image: magic=unset, swap_type=0x1, copy_done=0x3, image_ok=0x3
2021-09-21T15:25:06.369Z DEBUG modem << I: Boot source: none
2021-09-21T15:25:06.371Z DEBUG modem << I: Swap type: none
2021-09-21T15:25:06.411Z DEBUG modem << I: Bootloader chainload address offset: 0x10000
2021-09-21T15:25:06.414Z DEBUG modem << I: Jumping to the first image slot
2021-09-21T15:25:06.681Z DEBUG modem << *** Booting Zephyr OS build v2.6.0-rc1-ncs1  ***
2021-09-21T15:25:06.687Z DEBUG modem << Flash regionsDomainPermissions
2021-09-21T15:25:06.690Z DEBUG modem << 00 03 0x00000 0x20000 Securerwxl
2021-09-21T15:25:06.693Z DEBUG modem << 04 31 0x20000 0x100000 Non-Securerwxl
2021-09-21T15:25:06.697Z DEBUG modem << Non-secure callable region 0 placed in flash region 3 with size 32.
2021-09-21T15:25:06.747Z DEBUG modem << SRAM regionDomainPermissions
2021-09-21T15:25:06.754Z DEBUG modem << 00 07 0x00000 0x10000 Securerwxl
2021-09-21T15:25:06.757Z DEBUG modem << 08 31 0x10000 0x40000 Non-Securerwxl
2021-09-21T15:25:06.771Z DEBUG modem << PeripheralDomainStatus
2021-09-21T15:25:06.774Z DEBUG modem << 00 NRF_P0               Non-SecureOK
2021-09-21T15:25:06.776Z DEBUG modem << 01 NRF_CLOCK            Non-SecureOK
2021-09-21T15:25:06.778Z DEBUG modem << 02 NRF_RTC0             Non-SecureOK
2021-09-21T15:25:06.781Z DEBUG modem << 03 NRF_RTC1             Non-SecureOK
2021-09-21T15:25:06.791Z DEBUG modem << 04 NRF_NVMC             Non-SecureOK
2021-09-21T15:25:06.794Z DEBUG modem << 05 NRF_UARTE1           Non-SecureOK
2021-09-21T15:25:06.830Z DEBUG modem << 06 NRF_UARTE2           SecureSKIP
2021-09-21T15:25:06.832Z DEBUG modem << 07 NRF_TWIM2            Non-SecureOK
2021-09-21T15:25:06.833Z DEBUG modem << 08 NRF_SPIM3            Non-SecureOK
2021-09-21T15:25:06.834Z DEBUG modem << 09 NRF_TIMER0           Non-SecureOK
2021-09-21T15:25:06.845Z DEBUG modem << 10 NRF_TIMER1           Non-SecureOK
2021-09-21T15:25:06.850Z DEBUG modem << 11 NRF_TIMER2           Non-SecureOK
2021-09-21T15:25:06.852Z DEBUG modem << 12 NRF_SAADC            Non-SecureOK
2021-09-21T15:25:06.855Z DEBUG modem << 13 NRF_PWM0             Non-SecureOK
2021-09-21T15:25:06.857Z DEBUG modem << 14 NRF_PWM1             Non-SecureOK
2021-09-21T15:25:06.858Z DEBUG modem << 15 NRF_PWM2             Non-SecureOK
2021-09-21T15:25:06.859Z DEBUG modem << 16 NRF_PWM3             Non-SecureOK
2021-09-21T15:25:06.861Z DEBUG modem << 17 NRF_WDT              Non-SecureOK
2021-09-21T15:25:06.862Z DEBUG modem << 18 NRF_IPC              Non-SecureOK
2021-09-21T15:25:06.863Z DEBUG modem << 19 NRF_VMC              Non-SecureOK
2021-09-21T15:25:06.864Z DEBUG modem << 20 NRF_FPU              Non-SecureOK
2021-09-21T15:25:06.865Z DEBUG modem << 21 NRF_EGU1             Non-SecureOK
2021-09-21T15:25:06.866Z DEBUG modem << 22 NRF_EGU2             Non-SecureOK
2021-09-21T15:25:06.866Z DEBUG modem << 23 NRF_DPPIC            Non-SecureOK
2021-09-21T15:25:06.867Z DEBUG modem << 24 NRF_REGULATORS       Non-SecureOK
2021-09-21T15:25:06.878Z DEBUG modem << 25 NRF_PDM              Non-SecureOK
2021-09-21T15:25:06.880Z DEBUG modem << 26 NRF_I2S              Non-SecureOK
2021-09-21T15:25:06.882Z DEBUG modem << 27 NRF_GPIOTE1          Non-SecureOK
2021-09-21T15:25:06.884Z DEBUG modem << SPM: NS image at 0x20200
2021-09-21T15:25:06.886Z DEBUG modem << SPM: NS MSP at 0x2001f660
2021-09-21T15:25:06.887Z DEBUG modem << SPM: NS reset vector at 0x26039
2021-09-21T15:25:06.888Z DEBUG modem << SPM: prepare to jump to Non-Secure image.
2021-09-21T15:25:06.890Z DEBUG modem << *** Booting Zephyr OS build v2.6.0-rc1-ncs1  ***
2021-09-21T15:25:06.891Z DEBUG modem << The AWS IoT sample started, version: v1.0.0
2021-09-21T15:25:08.978Z DEBUG modem << LTE cell changed: Cell ID: 161454349, Tracking area: 21001
2021-09-21T15:25:09.712Z DEBUG modem << RRC mode: Connected
2021-09-21T15:25:16.519Z DEBUG modem << RRC mode: Idle
2021-09-21T15:25:26.992Z DEBUG modem << RRC mode: Connected
2021-09-21T15:25:33.856Z DEBUG modem << Network registration status: Connected - home network
2021-09-21T15:25:33.865Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:25:33.868Z DEBUG modem << PSM parameter update: TAU: 3600, Active time: -1
2021-09-21T15:25:33.872Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:25:34.510Z DEBUG modem << DATE_TIME_OBTAINED_NTP
2021-09-21T15:26:00.176Z DEBUG modem << AWS_IOT_EVT_DISCONNECTED
2021-09-21T15:26:03.863Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:26:03.906Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:26:33.865Z DEBUG modem << W: connection_poll_start failed, error: -119
2021-09-21T15:26:33.900Z DEBUG modem << aws_iot_connect, error: -119
2021-09-21T15:26:33.903Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:26:44.526Z DEBUG modem << AWS_IOT_EVT_DISCONNECTED
2021-09-21T15:27:03.871Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:27:03.915Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:27:33.875Z DEBUG modem << W: connection_poll_start failed, error: -119
2021-09-21T15:27:33.905Z DEBUG modem << aws_iot_connect, error: -119
2021-09-21T15:27:33.908Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:27:45.805Z DEBUG modem << AWS_IOT_EVT_DISCONNECTED
2021-09-21T15:28:03.883Z DEBUG modem << Next connection retry in 30 seconds
2021-09-21T15:28:03.915Z DEBUG modem << AWS_IOT_EVT_CONNECTING
2021-09-21T15:28:33.885Z DEBUG modem << W: connection_poll_start failed, error: -119
2021-09-21T15:28:33.912Z DEBUG modem << aws_iot_connect, error: -119
2021-09-21T15:28:33.917Z DEBUG modem << Next connection retry in 30 seconds

[Markus Tacker (he/him)]

That's progress.

Did you also verify the cloud side permissions? Especially that the policy is attached to your thing's certificate?