Sample Azure IoT Hub (Thingy9.1)

RE: Sample Azure IoT Hub (Thingy9.1)

Sigurd Hellesvik — Tue, 23 Nov 2021 07:52:46 GMT

Hi Acti,

On your device, you have 3 certs, from the following places:

Client cert: Generated by you
Client Key: Generated by you
CA cert: Baltimore CyberTrust Root certificate*

For DPS group enrollment the server should have 1 cert:

Root/Intermediate CA cert: Generated by you

Our documentation advises to use this tutorial to generate certs. You can use other methods, but I advise to use this method first, to see that everything works.
(* Same about the Baltimore CyberTrust Root; You could possibly be able to use other certs in place of this. But we know that the Baltimore CyberTrust Root works, so at least use this for the first tests, just to see that everything works.)

If you are still not able to make it work with the above settings, I advise you to try and make the IoT Hub work without DPS first.
DPS adds a layer of complexity, and will make the issue harder to debug.

Regards,
Sigurd Hellesvik

RE: Sample Azure IoT Hub (Thingy9.1)

ActiTAG — Mon, 22 Nov 2021 16:36:09 GMT

Ok so, the CA server is the certifcate found here azure-iot-sdk-c/certs.c at master · Azure/azure-iot-sdk-c · GitHub give to the device as CA cert . I gave the CA generated that correspond to the CA device to Azure cloud.
If what I write is correct then I don't understand why I still have error -111...

Thank you in advance for your reply.

RE: Sample Azure IoT Hub (Thingy9.1)

Sigurd Hellesvik — Mon, 22 Nov 2021 15:38:49 GMT

* You can also upload client public keys to the Server.

Does this make sense?

Regards,
Sigurd Hellesvik

RE: Sample Azure IoT Hub (Thingy9.1)

ActiTAG — Mon, 22 Nov 2021 15:20:40 GMT

So I need to used this one azure-iot-sdk-c/certs.c at master · Azure/azure-iot-sdk-c · GitHub rather than my generated CA upload on DPS ?

RE: Sample Azure IoT Hub (Thingy9.1)

Sigurd Hellesvik — Mon, 22 Nov 2021 14:50:53 GMT

Hi Acti,

Your client need to trust the Azure IoT Hub to connect to it.
To check this trust, the device needs the Baltimore CyberTrust Root certificate.
So the CA certificate that you provision to the device is not the CA you generated, but the Baltimore CyberTrust Root certificate.

Regards,
Sigurd Hellesvik

RE: Sample Azure IoT Hub (Thingy9.1)

ActiTAG — Mon, 22 Nov 2021 14:41:03 GMT

Hi !

No I don't use it. With my python script using the SDK I don't need to use it. Is it the case for the thingy ?

Thank you in advance.

RE: Sample Azure IoT Hub (Thingy9.1)

Sigurd Hellesvik — Mon, 22 Nov 2021 13:50:18 GMT

Hi,

Are you using the Baltimore CyberTrust Root for anything?

Regards,
Sigurd Hellesvik

RE: Sample Azure IoT Hub (Thingy9.1)

ActiTAG — Fri, 19 Nov 2021 16:13:10 GMT

Hi,

I can't open my trace.

Hum I follow this tutorial to generate certificates : Tutorial - Use OpenSSL to create X.509 test certificates for Azure IoT Hub | Microsoft Docs

I'm not able to make it works without DPS too. Same error in mqtt connect error.

RE: Sample Azure IoT Hub (Thingy9.1)

Sigurd Hellesvik — Fri, 19 Nov 2021 14:40:15 GMT

Hi Acti,

I am not able to open your trace. Are you able to open the trace file you added in our Trace Collector (From nRF Connect for Desktop)?

You should have three certificates for the nRF9160: private+key generated from the Tutorial: Using Microsoft-supplied scripts to create test certificates, and a CA, which is the Baltimore CyberTrust Root, right?

Then on the Azure Cloud DPS side, you create a enrollment group which has the root CA cert generated from the scripts.

To take a step beack, are you able to make Azure IoT Hub work without DPS?

Regards,
Sigurd Hellesvik

RE: Sample Azure IoT Hub (Thingy9.1)

ActiTAG — Fri, 19 Nov 2021 11:21:09 GMT

When I use debugger I see that the MQTT connection failed :

the client id = <device name> and username = <ID Scope>/registrations/<device name>/api-version=2019-03-31
Did I forget to set something or maybe add something to Azure?

RE: Sample Azure IoT Hub (Thingy9.1)

ActiTAG — Thu, 18 Nov 2021 14:26:11 GMT

I want to use it with DPS, I made an enrollment group with my ca. is there other certificate give to the DPS ? The IoT Hub doesn't expect ca no ?

RE: Sample Azure IoT Hub (Thingy9.1)

Sigurd Hellesvik — Thu, 18 Nov 2021 12:37:00 GMT

Just to clarify: do you want to use Iot Hub alone, or IoT Hub with DPS?

How are you handling the certificates on the cloud side?

Regards,
Sigurd Hellesvik

RE: Sample Azure IoT Hub (Thingy9.1)

ActiTAG — Wed, 17 Nov 2021 17:08:05 GMT

Hi ! Yes I follow all the step and check it once again but the result is the same. I have a python script on my computer using the Azure SDK that made provisioning and data sending to my IoT Hub. I have the same CA, I create the certificate for the Thingy and upload it with the same sec_tag in the prj.conf. I don't know where to look, I double check all point...

RE: Sample Azure IoT Hub (Thingy9.1)

Sigurd Hellesvik — Wed, 17 Nov 2021 12:18:39 GMT

Hi Acti,

Error -111 means that the Azure cloud is refusing your connection.

Have you followed the steps found at our Azure IoT Hub documentation?

Regards,
Sigurd Hellesvik