Wiki source code of Dragino NB device connection to AWS platform instructions

Version 23.3 by Xiaoling on 2024/05/29 09:36

version	line-number	content
1.1	1	{{toc/}}
	2
	3
22.1	4	= (% data-sider-select-id="01d9dce7-4047-4b71-a8e2-c5df7daa2d54" %)1. Log in to the platform and find IOT core(%%) =
1.1	5
23.2	6
22.1	7	= (% data-sider-select-id="4d2599c0-e2a9-4d10-8c01-c68a77c3b183" %)2. Create your own test policy(%%) =
1.1	8
22.1	9	(% data-sider-select-id="499b9594-5b20-42a9-b15b-21be5a1ef28e" %)
23.2	10	== (% data-sider-select-id="c0f85e83-53c9-450c-b4eb-457071bdfbf9" %)2.1 First click the policy on the left, enter the page and click Create policy(%%) ==
1.1	11
23.3	12	(% class="wikigeneratedid" id="H" %)
	13	[[image:image-20240528172927-2.png\|\|height="377" width="931"]]
1.1	14
	15
23.2	16	== (% data-sider-select-id="02035a79-77c4-4edb-b132-61acdb529526" %)2.2 After filling in a policy name for testing, the policy will be displayed on the page(%%) ==
	17
	18
1.2	19	a. Fill in any name
1.1	20
1.2	21	b. Configure the policy you created
1.1	22
22.1	23	[[image:image-20240528173144-3.png\|\|height="572" width="931"]]
1.1	24
22.1	25
1.2	26	c. After clicking to enter the policy configuration page, follow the clicking sequence below to go to the json configuration interface, and then fill in the following fields in the "statement" keyword:
1.1	27
22.1	28	(% data-sider-select-id="7bc0f6db-481d-435a-ad0c-92cf0ede3ea4" %)
	29	(% data-sider-select-id="8026a4d9-df91-4895-b9c5-3d6ac9b46012" %){
1.1	30
22.1	31	~ "Version": "2012-10-17",
1.1	32
22.1	33	~ "Statement": [
1.1	34
22.1	35	~ {
1.2	36
22.1	37	~ "Effect": "Allow",
1.2	38
22.1	39	~ "Action": "",
1.2	40
22.1	41	~ "Resource": ""
1.2	42
22.1	43	~ }
1.2	44
22.1	45	~ ]
1.2	46
22.1	47	}
1.2	48
	49
22.1	50	[[image:image-20240528173203-4.png\|\|height="517" width="942"]]
1.2	51
22.1	52
1.2	53	d. Create this policy
	54
	55
22.1	56	(% data-sider-select-id="21f75c89-756f-4f95-919d-30cc5cf86298" %)
	57	= 3. Create a Things =
1.2	58
22.1	59	(% data-sider-select-id="1a295982-a5d4-4787-896b-ac87e2385b09" %)
	60	== 3.1 Create a single Things ==
1.2	61
23.2	62
22.1	63	(% data-sider-select-id="b6a1852f-c446-4c98-a017-595ac62adc60" %)
	64	~1. Select Create Things
1.2	65
22.1	66	[[image:image-20240528173244-5.png\|\|height="329" width="932"]]
1.2	67
22.1	68	[[image:image-20240528173500-6.png\|\|height="484" width="928"]]
1.2	69
	70
22.1	71	(% data-sider-select-id="de8a3324-fa57-46eb-a85c-49eeea34baa5" %)
	72	2. Fill in the name of the control item you want to create in the thing name column.
1.2	73
	74	Use the default for other parameters
	75
	76	Then click Next.
	77
22.1	78	[[image:image-20240528173754-7.png\|\|height="712" width="781"]]
1.2	79
	80
22.1	81	(% data-sider-select-id="fc59dc2d-1ed3-41f5-8482-8534342857a7" %)
	82	3. Choose to automatically generate a new certificate
	83
1.2	84	Then click Next
	85
22.1	86	[[image:image-20240528173829-8.png\|\|height="547" width="782"]]
1.2	87
	88
22.1	89	(% data-sider-select-id="d2fd3708-ecaf-4479-b1eb-b5db28e1adb9" %)
	90	4. The next step is to choose a strategy
	91
1.2	92	Here you can choose a policy we created in the first step
	93
22.1	94	[[image:image-20240528173851-9.png\|\|height="580" width="785"]]
1.2	95
	96
22.1	97	(% data-sider-select-id="2f8892b2-d89c-416e-a5e6-6f58bd557860" %)
	98	5. When you click to create things, the certificate download page will pop up.
	99
23.1	100	(% data-sider-select-id="398c8d35-75ff-4077-85bb-9e0377efa186" %)
	101	(% data-sider-select-id="087aa6c7-c542-4afc-9ce6-291538c31764" %)This certificate is very important.(%%) After creating the device, you must download the certificate of the device so that our NB device can connect normally.
1.2	102
	103	Please download all the following certificates and put them in a folder.
	104
22.1	105	[[image:image-20240528173926-10.png]]
1.2	106
	107
22.1	108	6. You can see the things you just created in the things
1.2	109
22.1	110	[[image:image-20240528173951-11.png\|\|height="381" width="1089"]]
1.2	111
	112
22.1	113	(% data-sider-select-id="3ba36b16-0696-40e7-88b5-2c533f73589a" %)
23.1	114	= (% data-sider-select-id="fc07fe98-6fd9-4d61-a991-8524b6097b3a" %)4. Connect to AWS using Dragino-NB device(%%) =
1.2	115
22.1	116	(% data-sider-select-id="582a7e84-a00a-4129-b71d-347a29aa5142" %)
	117	== 4.1 Upgrade the firmware to configure TTS firmware to set the certificate ==
1.2	118
23.2	119
23.1	120	User can change device firmware to::
1.2	121
23.1	122	* Update with new features.
22.1	123
23.1	124	* Fix bugs.
22.1	125
23.1	126	Firmware and changelog can be downloaded from : [[Set up TLS certificate - Dropbox>>url:https://www.dropbox.com/sh/sxrgszkac4ips0q/AAA7xVIHen982Nc0edNPaB-Wa/NB-IoT/Set%20up%20TLS%20certificate?dl=0&subfolder_nav_tracking=1\|\|data-sider-select-id="830d1b64-cb24-48b3-91e4-49da5c3f0783"]]
	127
	128	Methods to Update Firmware:
	129
	130	* (Recommended way) OTA firmware update via BLE: [[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/BLE_Firmware_Update_NB_Sensors_BC660K-GL/]].
	131
	132	* Update through UART TTL interface : [[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/UART_Access_for_NB_ST_BC660K-GL/#H4.2UpdateFirmware28Assumethedevicealreadyhaveabootloader29]].
	133
	134
23.2	135
22.1	136	(% data-sider-select-id="954c6787-a52d-4862-805c-4afa47abd128" %)
	137	== 4.2 Configure certificate ==
	138
23.2	139
1.2	140	After upgrade the firmware, the serial port displays as follows：
	141
22.1	142	(% data-sider-select-id="8b6a9e23-dec0-476c-acd4-098aa19fe1f3" %)
	143	[[image:image-20240528174330-13.png\|\|height="286" width="568"]]
1.2	144
23.2	145
22.1	146	(% data-sider-select-id="8b6a9e23-dec0-476c-acd4-098aa19fe1f3" %)
23.2	147	=== 4.2.1 Configure CA certificate ===
1.2	148
23.2	149
1.2	150	Please input the certificate in PEM format for the user.
	151
	152	Use the AT command AT+CACERT as follows:
	153
	154	AT+CACERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--
	155
	156	MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
	157
	158	ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
	159
	160	b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL
	161
	162	MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
	163
	164	b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj
	165
	166	ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM
	167
	168	9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw
	169
	170	IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6
	171
	172	VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L
	173
	174	93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm
	175
	176	jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
	177
	178	AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA
	179
	180	A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI
	181
	182	U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs
	183
	184	N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv
	185
	186	o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU
	187
	188	5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy
	189
	190	rqXRfboQnoZsG4q5WTP468SQvvG5
	191
	192	~-~-~-~--END CERTIFICATE~-~-~-~--}
	193
23.2	194	Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
1.2	195
22.1	196	[[image:image-20240528174408-14.png]]
1.2	197
	198
	199	After successful execution, as shown in the following figure.
	200
22.1	201	[[image:image-20240528174502-15.png]]
1.2	202
23.2	203	Display "Successfully configured CA certificate." If the configuration is successful, otherwise it is considered configuration failure.
1.2	204
23.2	205
22.1	206	(% data-sider-select-id="49618231-3f2d-4069-952f-8ca923909048" %)
23.2	207	=== 4.2.2 Configure client certificate ===
1.2	208
23.2	209
1.2	210	Use the AT command AT+CLICERT as follows：
	211
	212	AT+CLICERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--
	213
	214	MIIDWTCCAkGgAwIBAgIUYSpJUzfb4NTa76JJxd2th0fZA8swDQYJKoZIhvcNAQEL
	215
	216	BQAwTTFLMEkGA1UECwxCQW1hem9uIFdlYiBTZXJ2aWNlcyBPPUFtYXpvbi5jb20g
	217
	218	SW5jLiBMPVNlYXR0bGUgU1Q9V2FzaGluZ3RvbiBDPVVTMB4XDTI0MDUyNDA4MDI0
	219
	220	NVoXDTQ5MTIzMTIzNTk1OVowHjEcMBoGA1UEAwwTQVdTIElvVCBDZXJ0aWZpY2F0
	221
	222	ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTdc1GQLVBohAeCJD6n
	223
	224	6WTFAFrygTch90a5wUr2bhlVuDxvEhEKNcmu5vOCo5agmfLWb2VCxgezgvQOBYQ8
	225
	226	1oTqXJNdl4tS0DICfqb/ogVHWGHRao67XyhbPNBS0j/nCPTIIk6+/NBeYPOjaG+p
	227
	228	utfXE7SGIEcc3RevkYkUJx6y+WH7MLjj1mufuXBVWIL1RrfrIRPw6auVk7dhS5rU
	229
	230	NvYcJa7Qd6gpAh1DzPj7ZECrv7fEIIBDEsSYOy6ToWtzqGIVcIAHBDfORB0Hcm+N
	231
	232	7wG3KDf61P4aWkLlkP5pRUaUIQdVblxginmx2K3n8t/WP7QcfITa191rjEVVBXmk
	233
	234	ROsCAwEAAaNgMF4wHwYDVR0jBBgwFoAUs8Caohh1ZGP8kjSn3rtxJiJJ9IswHQYD
	235
	236	VR0OBBYEFCjwGwqD7FG9UCNm3wjFQX4HixzfMAwGA1UdEwEB/wQCMAAwDgYDVR0P
	237
	238	AQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQBgqI49a4PBQZYrFM63TX3EHgdd
	239
	240	N6Pj7AytjO+SrKNMCSo/OtIvhDTxOocr1vKrux1Tw5qmrllrIXLtlGtbmln5DS6a
	241
	242	DTCLrjwcIFIabLxpx5DPY1WSMYvL04SW7d4Y+3SxOFNRotDSiomr8eIIac0d3HE2
	243
	244	B5b0SnWZgWbrhjNUgvwo8l8tA9DOGIr2MeQ5kPjudOOiYSR3HC0v+jviBMV6VX8M
	245
	246	LHVH3CRshHDKBGpV1NZ1RAm9EY/oRGtSiMsyjRh6hegC0vehwVxaC4w9qG0ASkzz
	247
	248	42OOGfNqhYnYDiKTEIkazaoAFpTKDejWBaL7W5VpthUkQOl67IyX+ohuUKTo
	249
	250	~-~-~-~--END CERTIFICATE~-~-~-~--}
	251
23.2	252	Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
1.2	253
22.1	254	[[image:image-20240528174630-16.png\|\|height="553" width="747"]]
1.2	255
23.2	256	Display "Successfully configured client certificate." Configuration successful, otherwise configuration failed.
1.2	257
23.2	258
22.1	259	(% data-sider-select-id="61ec994b-4a66-4db9-8b86-a401c99ba491" %)
23.2	260	=== 4.2.3 Configure client private key ===
1.2	261
23.2	262
1.2	263	Use the AT command AT+CLIKEY, as shown below
	264
	265	AT+CLIKEY=~-~-~-~--BEGIN RSA PRIVATE KEY~-~-~-~--
	266
	267	MIIEpAIBAAKCAQEAxN1zUZAtUGiEB4IkPqfpZMUAWvKBNyH3RrnBSvZuGVW4PG8S
	268
	269	EQo1ya7m84KjlqCZ8tZvZULGB7OC9A4FhDzWhOpck12Xi1LQMgJ+pv+iBUdYYdFq
	270
	271	jrtfKFs80FLSP+cI9MgiTr780F5g86Nob6m619cTtIYgRxzdF6+RiRQnHrL5Yfsw
	272
	273	uOPWa5+5cFVYgvVGt+shE/Dpq5WTt2FLmtQ29hwlrtB3qCkCHUPM+PtkQKu/t8Qg
	274
	275	gEMSxJg7LpOha3OoYhVwgAcEN85EHQdyb43vAbcoN/rU/hpaQuWQ/mlFRpQhB1Vu
	276
	277	XGCKebHYrefy39Y/tBx8hNrX3WuMRVUFeaRE6wIDAQABAoIBAFhAOcjvjBDGuaEw
	278
	279	CxV3al49HfqnSZuwg0xWSztSm2qKDcwxsnSnEhO2b1vsTW9h0YGV9Vv8gg/Dvkmv
	280
	281	23M7XqM4+IUraJsRZbl1etdcM4KQSCOZoF4Zyv+pXuq4pf31kQNCkHaikWzLUkUG
	282
	283	FPQxr0vA49mCYwfd/ZL3ppM/0IWmxRwloV1Gb9q8iDBUcJGSDokZnT7diUxzzOcd
	284
	285	+UJ6xUhFq1v46Y7vO+73XROLv34JEBC0bIw2ErL6+AbzhHwb2mkuSccG9Ks37g3Z
	286
	287	dyyjjj8hm1wvHWepuWqEssaiS3HD5zAsI0v85xS8RwNj3zLfd8o1WC666n3CO+ij
	288
	289	VdRmR4kCgYEA+/sEFxpfaRomqcLwJebZcZH06U1RfJFfnbH2/Q6fANf8zNxwWs9A
	290
	291	O+jyk/CLhHYRIk6VIOMQmWwEYgJ2eAHfw2Diwj4/0eqkGu+yZOS6KTCewxSV73vc
	292
	293	SvACramJy4y6yEgDN5onwR1XqfVMfA0LzTcSupHR/xvrpf/gCsNFPxUCgYEAyAFd
	294
	295	nMUhJFSq3pOogxA43aJSkA8YuDS3jpBkKQ6vx81APpIMabQauOxFDt488TZGP3Yy
	296
	297	lhpa/lfFIgu2K7CgV4dUp+JtJJoZ/F+ExxUUzdqB4zxzWywAcc3RebfwP6qASwFT
	298
	299	G3mXYci4tgNWR+k5CSsuLXDk/OT5uo5GeGAEc/8CgYEAk6V8uxDP8STKnNRFpN/E
	300
	301	b6CHciDE64m/DgbWY2cq0fK9BUjxaLRhvfj8EqVzCrWnyoNjLHcAJfW+B7PLuPvY
	302
	303	IoJlvE1/Vb/4UnQ7ApVnY3VCwaoRRNc9uIcz+pAJ1sRqOarAf9cLDkPkNwktvM5k
	304
	305	KOXpSnrhIms4w/bPT18l9xUCgYBsAMDKbXEuK0JyGw5+Z/4tQQCQpnZU0rLkm3ha
	306
	307	64FkxaORplBprEZZ4cyQ8NW78/EPSAadI/JLMp5TejuPcDvFyGCgoBcMEuNBc1tC
	308
	309	HlIzr3FAgl5Qt3wt+FTMA9YKq0nINxjn10s2FKwaLccj4f9YwiaXh0VAg22PnlDT
	310
	311	pBYDhQKBgQCMwyKXJ4zYiDRdvLvgKzeuKaU4KNQItHE4KORPfkecjPoENt4bKxDw
	312
	313	2EdNFQLIoqBHL1s+/8+SzhCI31V7pkTs1AqCxDExJS7+8Z5NQFQIo/jooUo0N80E
	314
	315	y3ZZS6OLOXXscEqhMogf1grfbabXM9OkgTIq43cPQHtMGQiFAtIJkg==
	316
	317	~-~-~-~--END RSA PRIVATE KEY~-~-~-~--}
	318
23.2	319	Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
1.2	320
22.1	321	[[image:image-20240528174702-17.png]]
1.2	322
23.2	323	Display "Successfully configured client private key." If the configuration is successful, otherwise it is considered configuration failure.
1.2	324
23.2	325
22.1	326	(% data-sider-select-id="6ba3fbe9-394a-47e2-8eca-715449162645" %)
	327	=== 4.3.3 Re-upgrade the firmware ===
1.2	328
	329
23.2	330	After the certificate configuration is completed, Re-upgrade to the firmware you originally used.
	331
	332
22.1	333	(% data-sider-select-id="d010cb3f-ad9a-4420-80d1-919b61731f41" %)
	334	= 5. Configure draginoNB-device =
1.2	335
22.1	336	(% data-sider-select-id="8125b1b7-0428-410e-a7c1-261a468944de" %)
	337	== 5.1 Configure the data format sent by the device ==
	338
23.2	339
1.2	340	AT+PRO=3,5(Data is in Json format of MQTT)
	341
	342
22.1	343	(% data-sider-select-id="ba72cd93-5d23-47b8-8b69-2238e0b501ca" %)
	344	== 5.2 Set server address ==
1.2	345
23.2	346
1.2	347	AT+SERVADDR=an5tk94sdgjat-ats.iot.us-east-1.amazonaws.com,8883
	348
	349
22.1	350	(% data-sider-select-id="7da97212-7298-43eb-b178-94231a3eb5d8" %)
23.2	351	== 5.3 Set up private and public topics ==
1.2	352
23.2	353
1.2	354	AWS does not limit topics, so you can set any topic
	355
	356	AT+SUBTOPIC=Any
	357
	358	AT+PUBTOPIC=Any
	359
	360
22.1	361	(% data-sider-select-id="a53f5c46-7530-440d-b29e-61a4eaafb709" %)
	362	== 5.4 Set the TLS mode ==
1.2	363
23.2	364
1.2	365	AT+TLSMOD=1,2
	366
	367	To use the TLS mode certificate function, users need to configure the AT+TLSMOD command
	368
	369	AT+TLSMOD=1,0 No authentication
	370
	371	AT+TLSMOD=1,1 Perform server authentication
	372
	373	AT+TLSMOD=1,2 Perform server and client authentication if requested by the remote server.（In AWS we recommend using this mode）
	374
	375
22.1	376	Restart the device
1.2	377
23.2	378
22.1	379	(% data-sider-select-id="07128e51-24f8-40ff-b2a7-4a4de2346889" %)
	380	= 6. View data on AWS =
1.2	381
22.1	382	(% data-sider-select-id="6c108d6d-db3d-4542-8193-c4c33c88bc41" %)
23.2	383	== 6.1 Find MQTT test client in test ==
1.2	384
23.2	385
1.2	386	In the fourth step, fill in the topics you subscribed to before
	387
	388	AT+PUBTOPIC=XXXX
	389
	390	If you forget your previous topic, you can fill in #,subscribe to all topics
	391
22.1	392	[[image:image-20240528175111-18.png\|\|height="409" width="1014"]]
1.2	393
	394
22.1	395	(% data-sider-select-id="9c23abff-6a4a-4320-95a2-33c42eb296f3" %)
	396	== (% data-sider-select-id="638ae5a9-ed23-43ff-bd61-b1c66e0d01d0" %)6.2 The data published information in Subscriptions(%%) ==
1.2	397
22.1	398
	399	[[image:image-20240528175133-19.png\|\|height="563" width="1022"]]
	400
	401	[[image:image-20240528175154-20.png\|\|height="752" width="1042"]]
	402
	403

Wiki source code of Dragino NB device connection to AWS platform instructions

Applications

Navigation