page_type	languages	products	name	description	urlFragment
sample	c cpp	azure azure-iot-hub	Azure MXChip IoT DevKit DPS	Use the Device Provisioning Service to automatically provision security enabled devices to IoT hub.	sample

Use Azure IoT Hub Device Provisioning Service auto-provisioning to register the MXChip IoT DevKit with IoT Hub

This article describes how to use Azure IoT Hub Device Provisioning Service auto-provisioning, to register the MXChip IoT DevKit with Azure IoT Hub. In this tutorial, you learn how to:

• Configure the global endpoint of the device provisioning service on a device.
• Use a unique device secret (UDS) to generate an X.509 certificate.
• Enroll an individual device.
• Verify that the device is registered.

The MXChip IoT DevKit is an all-in-one Arduino-compatible board with rich peripherals and sensors. You can develop for it by using the Visual Studio Code extension for Arduino. The DevKit comes with a growing projects catalog to guide your prototype Internet of Things (IoT) solutions that take advantage of Azure services.

What you need

Finish the Getting Started Guide to:

• Have your IoT DevKit connected to Wi-Fi.
• Prepare the development environment.

An active Azure subscription. If you do not have one, you can register via one of these methods:

• Activate a free 30-day trial Microsoft Azure account.
• If you are an MSDN or Visual Studio subscriber. Claim your Azure credit.

Even if you have a subscription

Even if you do have an active Azure subscription but have not yet created an instance of the Device Provisioning service

• Create and link IoT Hub with Device Provisioning Service instance with Set up auto provisioning.

Open the project folder

Start VS Code

• Start Visual Studio Code.
• Make sure Azure IoT Tools is installed.
• Connect IoT DevKit to your PC.

Open Azure IoT Device Workbench Examples

Use F1 orCtrl+Shift+P (macOS: Cmd+Shift+P) to open the command palette, type Azure IoT Device Workbench, and then select Open Examples....

Select IoT DevKit.

Then the IoT Device Workbench Example window is shown up.

Find DevKit DPS and click Open Sample button. A new VS Code window with a project folder in it opens.

Update the Global Device Endpoint and ID Scope in device code

1. In the Azure portal, go to your DPS instance, select the Overview blade for your Device Provisioning Service and note down the Global device endpoint and ID Scope value.

2. Open DevKitDPS.ino, Find and replace [Global Device Endpoint] and [ID Scope] with the values you just note down.

Save Unique Device Secret on STSAFE security chip

Device Provisioning Service can be configured on device based on its Hardware Security Module (HSM). DevKit uses Device Identity Composition Engine (DICE) from the Trusted Computing Group (TCG). A Unique Device Secret (UDS) saved in STSAFE security chip on the DevKit is used to generate the device unique X.509 certificate. The certificate can be later used for the enrollment process in the Device Provisioning Service.

A typical Unique Device Secret (UDS) is a 64 characters long hexadecimal digit.

1. Open the command palette and select Azure IoT Device Workbench: Configure Device Settings....

   

2. Select Config Unique Device String (UDS).

   

3. Note down the generated uds string and then press enter.

   

Here you may need to close serial monitor and let devkit enter configuration mode. After UDS string configed successfully, you will see a Visual Studio Code notification.

Build and upload the device code

1. Open DevKitDPS.ino and find registrationId, give a new value.

   The Registration ID has to use alphanumeric, lowercase, and hyphen combinations only with maximum 128 characters long. See Manage device enrollments with Azure portal for more details.

   You can leave the registrationId as blank, the application will generate one for you based on the MAC address and firmware version. If you want to customized it,

2. Open the command palette and select Azure IoT Device Workbench: Upload Device Code.

3. VS Code then starts verifying and uploading the code to your DevKit.

4. The DevKit reboots and starts running the code.

5. If you leave the registrationId as blank, please note down DevKit MAC Address and DevKit Firmware Version value from serial monitor.

Generate X.509 certificate

Open integrated terminal in Visual Studio Code and run dps_cert_gen in tool folder. Input information just noted down.

1. Specified the registrationId

   

2. Not specified the registrationId

   

And you will see a .pem file generated in your folder.

Note: Here we input .build\DevKitDPS when program ask for project name. Then the program will find compiled file with path .build\DevKitDPS.ino.bin and .build\DevKitDPS.ino.elf. Output compiled binary file to .build path is our default setting. If you changed build path or .ino file name before, you will need to provide a path to your compiled output file.

Create a device enrollment entry in the Device Provisioning Service

1. In the Azure portal, navigate to your provisioning service. Click Manage enrollments, and select the Add individual enrollments tab.

2. Upload the .pem certificate you just have.

3. Leave the rest as default and click Save.

Start the DevKit

1. Launch VS Code and open serial monitor.

2. Press the Reset button on your DevKit.

You should see the DevKit start the registration with your Device Provisioning Service and DPS connected! on DevKit Screen.

Verify the DevKit is registered on IoT Hub

Once your device boots, the following actions should take place:

1. The device sends a registration request to your Device Provisioning Service.
2. The Device Provisioning Service sends back a registration challenge to which your device responds.
3. On successful registration, the Device Provisioning Service sends the IoT hub URI, device ID and the encrypted key back to the device.
4. The IoT Hub client application on the device then connects to your hub.
5. On successful connection to the hub, you should see the device appear in the IoT hub's Device Explorer.

Problems and feedback

If you encounter problems, refer to FAQs or reach out to us from the following channels:

• Gitter.im
• Stackoverflow

Next Steps

Now that you have learned prepare the DevKit to enroll a device securely to DPS using DICE, so that it will automatically register to IoT Hub with zero-touch.

Advance to the other tutorials to learn:

• Create and provision a simulated device
• Manage device enrollments
• Revoke device access
• Use HSM with SDK
• Control access to Provisioning Service