Azure FOTA Update File Access from Blob Storage

RE: Azure FOTA Update File Access from Blob Storage

overflow — Wed, 27 Dec 2023 09:41:54 GMT

My ticket already created.

devzone.nordicsemi.com/.../need-help-with-fota-via-device-provisioning-on-my-nrf7002dk---azure-fota---iot-hub

RE: Azure FOTA Update File Access from Blob Storage

Sigurd Hellesvik — Wed, 27 Dec 2023 07:17:03 GMT

Hi Yvan,

Can you create a new ticket where you explain your issue?

I think it will be more tidy than doing a conversatiion in the middle of this ticket

RE: Azure FOTA Update File Access from Blob Storage

overflow — Tue, 26 Dec 2023 13:10:38 GMT

Hi, I've this same problem.

When I try do download the firmware.bin

I've download errono - 113 any idea?

RE: Azure FOTA Update File Access from Blob Storage

Sigurd Hellesvik — Fri, 16 Sep 2022 12:17:32 GMT

Hi Brown,

In that case, I suggest that you contact Azure's support instead.
They will know how to set it up on theirs side in a proper way.

Regards,
Sigurd Hellesvik

RE: Azure FOTA Update File Access from Blob Storage

brown27 — Fri, 16 Sep 2022 11:51:31 GMT

Supply the key to the Azure cloud. I was planning to supply the key to my nrf52840dk device by saving it as string in a .h file, as I did for the Azure IoT Hub certificates.

I initially thought that I might be able to supply the key to the Azure cloud storage account by setting zsock_setsockotpt(), but I don't think that it is possible to use this function to supply the access key. I could easily be wrong, though.

RE: Azure FOTA Update File Access from Blob Storage

Sigurd Hellesvik — Fri, 16 Sep 2022 11:23:39 GMT

Hi Brown,

[quote user="JetNoiseRacing"]If so, how would you supply the key in the connection process?[/quote]

Supply the key to the Azure cloud or to the nRF chip?

Regards,
Sigurd Hellesvik

RE: Azure FOTA Update File Access from Blob Storage

brown27 — Wed, 14 Sep 2022 21:33:48 GMT

Hi Sigurd ,

Is using the storage account's access key an option (since Azure storage accounts do not support certificate chains, as you mention)? If so, how would you supply the key in the connection process?

I would reply directly to your comment but I am having issues with the "reply" button again.

Thanks.

RE: Azure FOTA Update File Access from Blob Storage

Nick163485132 — Fri, 01 Oct 2021 15:34:31 GMT

Thanks Sigurd. I'll look into that.

RE: Azure FOTA Update File Access from Blob Storage

Sigurd Hellesvik — Thu, 30 Sep 2021 13:55:46 GMT

Hi Nick

Good to hear that it is working now!

For the private access:
I asked the developers, and they say that it does not look like Azure blob storage allow for the use of a custom certificate chain.

You will have to setup their own endpoints, for example using: Configure TLS mutual authentication for Azure App Service

Regards,
Sigurd Hellesvik

RE: Azure FOTA Update File Access from Blob Storage

Nick163485132 — Wed, 29 Sep 2021 20:47:23 GMT

Thank you Sigurd. My process was the same but I must have changed a setting somewhere during the creation of the Storage Account or Container as the process looked different today than it did yesterday. It appears to be working now, though I'm concerned that everything is set to public access. How do you suggest we modify this setup so that only administrators and our IoT leaf devices have access to these update files?

And thank you, I am aware of the edit feature but a problem with our firewall was causing this website to be excessively slow and exhibit odd behavior so I wasn't going to depend on something that didn't work the first time anyway.

RE: Azure FOTA Update File Access from Blob Storage

Sigurd Hellesvik — Wed, 29 Sep 2021 13:46:57 GMT

Hi Nick

[quote user=""]2. What is the purpose of CONFIG_AZURE_FOTA_SEC_TAG? [/quote]

The security tags are so that you are able to save multiple different certificates in your modem. They are not used by the cloud, but by the modem. See here for more information.

If you used the same certificates for as for azure in general, use the same tag as "CONFIG_AZURE_IOT_HUB_SEC_TAG".
If you provisioned new certificates for FOTA using another tag, use the tag number you chose when provisioning.

Regarding question 1 and question 2, I understand that both these are related to your issue with not being able to do a FOTA update?
Here are the steps I took to create a blob storage:

1. Create a Azure Storage Account. I just put in a name and used standard settings. This might change for you.

2. Chose your new Storage account, and go to the containers menu. Press "Create container" and choose a name.

3. Change something in your code (I added printk("After FOTA\n")) and build the project. Do not flash.

3. Select the new container. Then press "upload", and upload the file <your_project>/build/zephyr/app_update.bin.

4. Then just proceed as described in the Azure FOTA sample documentation, Go to your hub, find "device twin", copy and paste the JSON to "desired" and press save.
    Remember to change the "jobID" every time you want it to perform a FOTA again.
    Also remember to change the "host" and "path" variables to what you use on Azure.
    I had to add my container name to "path", as such:

"path": "fota-container/app-update.bin

Is this the same method you used to upload the firmware image?

(PS: You should be able to edit your posts, to fix formatting after you have posted)

Regards,
Sigurd Hellesvik

RE: Azure FOTA Update File Access from Blob Storage

Nick163485132 — Tue, 28 Sep 2021 20:09:37 GMT

I'm sorry, I don't know what happened to my formatting. This website has not been cooperating for a couple of days. The lines of code I was referring to are:

# Change the security tag to the tag where the certificates are provisioned
# for the server where the FOTA image is hosted
CONFIG_AZURE_FOTA_SEC_TAG=10