Azure-docs: Uploading certificates to DPS using C# SDK

[alexanderbikk]

Hi,
Does the C# SDK support those steps from doc?

1. https://docs.microsoft.com/en-us/azure/iot-dps/how-to-verify-certificates#register-the-public-part-of-an-x509-certificate-and-get-a-verification-code
2. https://docs.microsoft.com/en-us/azure/iot-dps/how-to-verify-certificates#upload-the-signed-verification-certificate

I want to automate the process of downloading certificates to DPS. But I can not find this possibility in samples or in docs. As far as I understand in this case the only way is using the RESP API https://docs.microsoft.com/en-us/rest/api/iot-dps/dpscertificate

Thanks in advance

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: b94459f8-8dd8-aaac-5f51-69123ee88f71
• Version Independent ID: 24e5b70a-ccec-2fd6-7815-8feebfd90219
• Content: How to do proof-of-possession for X.509 CA certificates with Azure IoT Hub Device Provisioning Service
• Content Source: articles/iot-dps/how-to-verify-certificates.md
• Service: iot-dps
• GitHub Login: @wesmc7777
• Microsoft Alias: wesmc

[CHEEKATLAPRADEEP-MSFT]

@alexanderbikk Thanks for the question! We are investigating and will update you shortly.

[Alberto-Vega]

@alexanderbikk Have you seen this repo?
https://github.com/Azure-Samples/azure-iot-samples-csharp/tree/master/provisioning/Samples/device
https://github.com/Azure-Samples/azure-iot-samples-csharp/tree/master/provisioning/Samples/device/X509Sample

[alexanderbikk]

@Alberto-Vega-MSFT yes, I have seen. I'm using this repo to create group enrolment with existing certificate in DPS(that I uploaded and verified through Azure portal manually) and simulate device provisioning to an existing group enrolment.

I asked about uploading and verification the certificates in DPS.
According to this guide to upload CA certificate to DPS https://docs.microsoft.com/en-us/azure/iot-dps/how-to-verify-certificates
I have to do the following:

1. Upload the CA or Intermediate certificate to DPS
2. Get the random verification number.
3. Use the verification number to generate the verification certificate
4. Upload the verification certificate to DPS.

I have found the examples only for the step 3 - https://github.com/Azure-Samples/azure-iot-samples-csharp/tree/master/provisioning/Samples/service/GroupCertificateVerificationSample.
I didn't find any other links to SDK in the doc that I mentioned above. All other steps in the doc done through Azure portal

So I'm wondering can I upload the CA certificate, get the verification number and upload the verification certificate to DPS using C# SDK.
So, I'm looking for those three methods
https://docs.microsoft.com/en-us/rest/api/iot-dps/dpscertificate/createorupdate
https://docs.microsoft.com/en-us/rest/api/iot-dps/dpscertificate/generateverificationcode
https://docs.microsoft.com/en-us/rest/api/iot-dps/dpscertificate/verifycertificate

Did I miss something?

[Alberto-Vega]

I don't think the SDK can do that. Would you please open an issue on the SDK repo? In the meantime I will reach out internally.

[alexanderbikk]

Hi @Alberto-Vega-MSFT
Thanks for the answer.

I investigated issues in c# SDK repo and found similar question
https://github.com/Azure/azure-iot-sdk-csharp/issues/363

Looks like for security reasons if I want to upload my root certificate to DPS and verify it I must use the REST API or Azure CLI tool. At least for now. But as far as I understand this is security concept won't be changed in nearest future

[Alberto-Vega]

@alexanderbikk I am glad you found the answer to your question. We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.