Wiki source code of Dragino NB device connection to AWS platform instructions

Version 24.5 by Xiaoling on 2024/05/30 10:22

version	line-number	content
23.7	1	Table of Contents:
	2
1.1	3	{{toc/}}
	4
	5
23.7	6
	7
	8
	9
	10
	11
	12
	13
23.6	14	= 1. Log in to the platform and find IoT core =
1.1	15
23.2	16
23.6	17	= 2. Create your own test policy =
1.1	18
23.6	19	== 2.1 First click the policy on the left, enter the page and click Create policy ==
1.1	20
23.7	21
23.3	22	[[image:image-20240528172927-2.png\|\|height="377" width="931"]]
1.1	23
	24
23.6	25	== 2.2 After filling in a policy name for testing, the policy will be displayed on the page ==
23.2	26
	27
1.2	28	a. Fill in any name
1.1	29
1.2	30	b. Configure the policy you created
1.1	31
22.1	32	[[image:image-20240528173144-3.png\|\|height="572" width="931"]]
1.1	33
22.1	34
1.2	35	c. After clicking to enter the policy configuration page, follow the clicking sequence below to go to the json configuration interface, and then fill in the following fields in the "statement" keyword:
1.1	36
22.1	37	(% data-sider-select-id="7bc0f6db-481d-435a-ad0c-92cf0ede3ea4" %)
	38	(% data-sider-select-id="8026a4d9-df91-4895-b9c5-3d6ac9b46012" %){
1.1	39
22.1	40	~ "Version": "2012-10-17",
1.1	41
22.1	42	~ "Statement": [
1.1	43
22.1	44	~ {
1.2	45
22.1	46	~ "Effect": "Allow",
1.2	47
22.1	48	~ "Action": "",
1.2	49
22.1	50	~ "Resource": ""
1.2	51
22.1	52	~ }
1.2	53
22.1	54	~ ]
1.2	55
22.1	56	}
1.2	57
	58
22.1	59	[[image:image-20240528173203-4.png\|\|height="517" width="942"]]
1.2	60
22.1	61
1.2	62	d. Create this policy
	63
	64
22.1	65	= 3. Create a Things =
1.2	66
22.1	67	== 3.1 Create a single Things ==
1.2	68
23.2	69
23.7	70	(% style="color:blue" %)1. Select Create Things
1.2	71
22.1	72	[[image:image-20240528173244-5.png\|\|height="329" width="932"]]
1.2	73
22.1	74	[[image:image-20240528173500-6.png\|\|height="484" width="928"]]
1.2	75
	76
23.7	77	(% style="color:blue" %)2. Fill in the name of the control item you want to create in the thing name column
1.2	78
	79	Use the default for other parameters
	80
	81	Then click Next.
	82
22.1	83	[[image:image-20240528173754-7.png\|\|height="712" width="781"]]
1.2	84
	85
23.7	86	(% style="color:blue" %)3. Choose to automatically generate a new certificate
22.1	87
1.2	88	Then click Next
	89
22.1	90	[[image:image-20240528173829-8.png\|\|height="547" width="782"]]
1.2	91
	92
23.7	93	(% style="color:blue" %)4. The next step is to choose a strategy
22.1	94
1.2	95	Here you can choose a policy we created in the first step
	96
22.1	97	[[image:image-20240528173851-9.png\|\|height="580" width="785"]]
1.2	98
	99
23.7	100	(% style="color:blue" %)5. When you click to create things, the certificate download page will pop up
22.1	101
23.1	102	(% data-sider-select-id="398c8d35-75ff-4077-85bb-9e0377efa186" %)
	103	(% data-sider-select-id="087aa6c7-c542-4afc-9ce6-291538c31764" %)This certificate is very important.(%%) After creating the device, you must download the certificate of the device so that our NB device can connect normally.
1.2	104
	105	Please download all the following certificates and put them in a folder.
	106
22.1	107	[[image:image-20240528173926-10.png]]
1.2	108
	109
23.7	110	(% style="color:blue" %)6. You can see the things you just created in the things
1.2	111
22.1	112	[[image:image-20240528173951-11.png\|\|height="381" width="1089"]]
1.2	113
	114
23.7	115	= 4. Connect to AWS using Dragino-NB device =
1.2	116
24.4	117	(% data-sider-select-id="0bc6b974-b38c-48e7-b228-e220f1938e7f" %)
24.2	118	== 4.1 F(% data-sider-select-id="293a2a9f-2191-4013-b0d9-8bcfb95a179a" %)or -NB /-NS model(%%) ==
1.2	119
24.2	120	=== (% data-sider-select-id="293a2a9f-2191-4013-b0d9-8bcfb95a179a" %)4.1.1 Upgrade the firmware to configure TTS firmware to set the certificate(%%) ===
23.2	121
24.2	122
23.1	123	User can change device firmware to::
1.2	124
23.1	125	* Update with new features.
22.1	126
23.1	127	* Fix bugs.
22.1	128
24.2	129	Firmware and changelog can be downloaded from : [[Set up TLS certificate - Dropbox>>https://www.dropbox.com/scl/fo/1ykfsesmr3702tj3kp663/AOOyH1GiVEOGR41gASuiDk0?rlkey=1q7a1b5yvjgt87d16w8tt0cum&st=vdy765ut&dl=0\|\|data-sider-select-id="830d1b64-cb24-48b3-91e4-49da5c3f0783"]]
23.1	130
	131	Methods to Update Firmware:
	132
	133	* (Recommended way) OTA firmware update via BLE: [[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/BLE_Firmware_Update_NB_Sensors_BC660K-GL/]].
	134
	135	* Update through UART TTL interface : [[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/UART_Access_for_NB_ST_BC660K-GL/#H4.2UpdateFirmware28Assumethedevicealreadyhaveabootloader29]].
	136
24.2	137	=== (% data-sider-select-id="bb7de328-bb5d-4fe5-a008-7bf36bbf2d64" %)4.1.2 Configure certificate(%%) ===
23.2	138
22.1	139
1.2	140	After upgrade the firmware, the serial port displays as follows：
	141
22.1	142	(% data-sider-select-id="8b6a9e23-dec0-476c-acd4-098aa19fe1f3" %)
	143	[[image:image-20240528174330-13.png\|\|height="286" width="568"]]
1.2	144
23.2	145
24.2	146	==== (% data-sider-select-id="4f272daa-a217-4469-8de7-f4905835bbad" %)4.1.2.1 Configure CA certificate(%%) ====
1.2	147
23.2	148
1.2	149	Please input the certificate in PEM format for the user.
	150
	151	Use the AT command AT+CACERT as follows:
	152
	153	AT+CACERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--
	154
	155	MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
	156
	157	ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
	158
	159	b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL
	160
	161	MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
	162
	163	b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj
	164
	165	ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM
	166
	167	9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw
	168
	169	IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6
	170
	171	VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L
	172
	173	93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm
	174
	175	jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
	176
	177	AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA
	178
	179	A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI
	180
	181	U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs
	182
	183	N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv
	184
	185	o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU
	186
	187	5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy
	188
	189	rqXRfboQnoZsG4q5WTP468SQvvG5
	190
	191	~-~-~-~--END CERTIFICATE~-~-~-~--}
	192
23.4	193	(% style="color:red" %)Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
1.2	194
22.1	195	[[image:image-20240528174408-14.png]]
1.2	196
	197
	198	After successful execution, as shown in the following figure.
	199
22.1	200	[[image:image-20240528174502-15.png]]
1.2	201
23.4	202	Display (% style="color:blue" %)"Successfully configured CA certificate."(%%) If the configuration is successful, otherwise it is considered configuration failure.
1.2	203
23.2	204
24.2	205	==== (% data-sider-select-id="0b9009b4-385e-4e1e-91d4-0175c1af339d" %)4.1.2.2 Configure client certificate(%%) ====
1.2	206
23.2	207
1.2	208	Use the AT command AT+CLICERT as follows：
	209
	210	AT+CLICERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--
	211
	212	MIIDWTCCAkGgAwIBAgIUYSpJUzfb4NTa76JJxd2th0fZA8swDQYJKoZIhvcNAQEL
	213
	214	BQAwTTFLMEkGA1UECwxCQW1hem9uIFdlYiBTZXJ2aWNlcyBPPUFtYXpvbi5jb20g
	215
	216	SW5jLiBMPVNlYXR0bGUgU1Q9V2FzaGluZ3RvbiBDPVVTMB4XDTI0MDUyNDA4MDI0
	217
	218	NVoXDTQ5MTIzMTIzNTk1OVowHjEcMBoGA1UEAwwTQVdTIElvVCBDZXJ0aWZpY2F0
	219
	220	ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTdc1GQLVBohAeCJD6n
	221
	222	6WTFAFrygTch90a5wUr2bhlVuDxvEhEKNcmu5vOCo5agmfLWb2VCxgezgvQOBYQ8
	223
	224	1oTqXJNdl4tS0DICfqb/ogVHWGHRao67XyhbPNBS0j/nCPTIIk6+/NBeYPOjaG+p
	225
	226	utfXE7SGIEcc3RevkYkUJx6y+WH7MLjj1mufuXBVWIL1RrfrIRPw6auVk7dhS5rU
	227
	228	NvYcJa7Qd6gpAh1DzPj7ZECrv7fEIIBDEsSYOy6ToWtzqGIVcIAHBDfORB0Hcm+N
	229
	230	7wG3KDf61P4aWkLlkP5pRUaUIQdVblxginmx2K3n8t/WP7QcfITa191rjEVVBXmk
	231
	232	ROsCAwEAAaNgMF4wHwYDVR0jBBgwFoAUs8Caohh1ZGP8kjSn3rtxJiJJ9IswHQYD
	233
	234	VR0OBBYEFCjwGwqD7FG9UCNm3wjFQX4HixzfMAwGA1UdEwEB/wQCMAAwDgYDVR0P
	235
	236	AQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQBgqI49a4PBQZYrFM63TX3EHgdd
	237
	238	N6Pj7AytjO+SrKNMCSo/OtIvhDTxOocr1vKrux1Tw5qmrllrIXLtlGtbmln5DS6a
	239
	240	DTCLrjwcIFIabLxpx5DPY1WSMYvL04SW7d4Y+3SxOFNRotDSiomr8eIIac0d3HE2
	241
	242	B5b0SnWZgWbrhjNUgvwo8l8tA9DOGIr2MeQ5kPjudOOiYSR3HC0v+jviBMV6VX8M
	243
	244	LHVH3CRshHDKBGpV1NZ1RAm9EY/oRGtSiMsyjRh6hegC0vehwVxaC4w9qG0ASkzz
	245
	246	42OOGfNqhYnYDiKTEIkazaoAFpTKDejWBaL7W5VpthUkQOl67IyX+ohuUKTo
	247
	248	~-~-~-~--END CERTIFICATE~-~-~-~--}
	249
23.4	250	(% style="color:red" %)Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
1.2	251
22.1	252	[[image:image-20240528174630-16.png\|\|height="553" width="747"]]
1.2	253
23.4	254	Display (% style="color:blue" %)"Successfully configured client certificate."(%%) Configuration successful, otherwise configuration failed.
1.2	255
23.2	256
24.2	257	==== (% data-sider-select-id="7c5a8abc-e707-467b-ac02-db0a89098320" %)4.1.2.3 Configure client private key(%%) ====
1.2	258
23.2	259
1.2	260	Use the AT command AT+CLIKEY, as shown below
	261
	262	AT+CLIKEY=~-~-~-~--BEGIN RSA PRIVATE KEY~-~-~-~--
	263
	264	MIIEpAIBAAKCAQEAxN1zUZAtUGiEB4IkPqfpZMUAWvKBNyH3RrnBSvZuGVW4PG8S
	265
	266	EQo1ya7m84KjlqCZ8tZvZULGB7OC9A4FhDzWhOpck12Xi1LQMgJ+pv+iBUdYYdFq
	267
	268	jrtfKFs80FLSP+cI9MgiTr780F5g86Nob6m619cTtIYgRxzdF6+RiRQnHrL5Yfsw
	269
	270	uOPWa5+5cFVYgvVGt+shE/Dpq5WTt2FLmtQ29hwlrtB3qCkCHUPM+PtkQKu/t8Qg
	271
	272	gEMSxJg7LpOha3OoYhVwgAcEN85EHQdyb43vAbcoN/rU/hpaQuWQ/mlFRpQhB1Vu
	273
	274	XGCKebHYrefy39Y/tBx8hNrX3WuMRVUFeaRE6wIDAQABAoIBAFhAOcjvjBDGuaEw
	275
	276	CxV3al49HfqnSZuwg0xWSztSm2qKDcwxsnSnEhO2b1vsTW9h0YGV9Vv8gg/Dvkmv
	277
	278	23M7XqM4+IUraJsRZbl1etdcM4KQSCOZoF4Zyv+pXuq4pf31kQNCkHaikWzLUkUG
	279
	280	FPQxr0vA49mCYwfd/ZL3ppM/0IWmxRwloV1Gb9q8iDBUcJGSDokZnT7diUxzzOcd
	281
	282	+UJ6xUhFq1v46Y7vO+73XROLv34JEBC0bIw2ErL6+AbzhHwb2mkuSccG9Ks37g3Z
	283
	284	dyyjjj8hm1wvHWepuWqEssaiS3HD5zAsI0v85xS8RwNj3zLfd8o1WC666n3CO+ij
	285
	286	VdRmR4kCgYEA+/sEFxpfaRomqcLwJebZcZH06U1RfJFfnbH2/Q6fANf8zNxwWs9A
	287
	288	O+jyk/CLhHYRIk6VIOMQmWwEYgJ2eAHfw2Diwj4/0eqkGu+yZOS6KTCewxSV73vc
	289
	290	SvACramJy4y6yEgDN5onwR1XqfVMfA0LzTcSupHR/xvrpf/gCsNFPxUCgYEAyAFd
	291
	292	nMUhJFSq3pOogxA43aJSkA8YuDS3jpBkKQ6vx81APpIMabQauOxFDt488TZGP3Yy
	293
	294	lhpa/lfFIgu2K7CgV4dUp+JtJJoZ/F+ExxUUzdqB4zxzWywAcc3RebfwP6qASwFT
	295
	296	G3mXYci4tgNWR+k5CSsuLXDk/OT5uo5GeGAEc/8CgYEAk6V8uxDP8STKnNRFpN/E
	297
	298	b6CHciDE64m/DgbWY2cq0fK9BUjxaLRhvfj8EqVzCrWnyoNjLHcAJfW+B7PLuPvY
	299
	300	IoJlvE1/Vb/4UnQ7ApVnY3VCwaoRRNc9uIcz+pAJ1sRqOarAf9cLDkPkNwktvM5k
	301
	302	KOXpSnrhIms4w/bPT18l9xUCgYBsAMDKbXEuK0JyGw5+Z/4tQQCQpnZU0rLkm3ha
	303
	304	64FkxaORplBprEZZ4cyQ8NW78/EPSAadI/JLMp5TejuPcDvFyGCgoBcMEuNBc1tC
	305
	306	HlIzr3FAgl5Qt3wt+FTMA9YKq0nINxjn10s2FKwaLccj4f9YwiaXh0VAg22PnlDT
	307
	308	pBYDhQKBgQCMwyKXJ4zYiDRdvLvgKzeuKaU4KNQItHE4KORPfkecjPoENt4bKxDw
	309
	310	2EdNFQLIoqBHL1s+/8+SzhCI31V7pkTs1AqCxDExJS7+8Z5NQFQIo/jooUo0N80E
	311
	312	y3ZZS6OLOXXscEqhMogf1grfbabXM9OkgTIq43cPQHtMGQiFAtIJkg==
	313
	314	~-~-~-~--END RSA PRIVATE KEY~-~-~-~--}
	315
23.4	316	(% style="color:red" %)Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
1.2	317
22.1	318	[[image:image-20240528174702-17.png]]
1.2	319
23.7	320	Display(% style="color:blue" %) "Successfully configured client private key."(%%) If the configuration is successful, otherwise it is considered configuration failure.
1.2	321
23.2	322
24.4	323	==== (% data-sider-select-id="9c62fd56-4ff5-48af-8cca-db4565d1f25d" %)4.1.2.4 Re-upgrade the firmware(%%) ====
1.2	324
	325
23.2	326	After the certificate configuration is completed, Re-upgrade to the firmware you originally used.
	327
	328
24.2	329	(% data-sider-select-id="02f5aceb-0a5d-4922-8c3a-7e6772f46ad4" %)
	330	== 4.2 For -CB /-CS model ==
1.2	331
24.4	332	(% class="wikigeneratedid" data-sider-select-id="02f5aceb-0a5d-4922-8c3a-7e6772f46ad4" %)
	333	=== 4.2.1 Upgrade the firmware to configure TTS firmware to set the certificate ===
24.2	334
	335
	336	User can change device firmware to::
	337
	338	* Update with new features.
	339
	340	* Fix bugs.
	341
	342	Firmware and changelog can be downloaded from : [[Set up TLS certificate - Dropbox>>https://www.dropbox.com/scl/fo/mk9u5ux3cfo94ke0s67ik/ADOIOdwIQfCO2WUZt0MxXyU?rlkey=7o6uaywrebbnsvuj4r0r694x6&st=smrmjj7t&dl=0\|\|data-sider-select-id="830d1b64-cb24-48b3-91e4-49da5c3f0783"]]
	343
	344	Methods to Update Firmware:
	345
	346	* (Recommended way) OTA firmware update via BLE: [[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/BLE_Firmware_Update_NB_Sensors_BC660K-GL/]].
	347
	348	* Update through UART TTL interface : [[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/UART_Access_for_NB_ST_BC660K-GL/#H4.2UpdateFirmware28Assumethedevicealreadyhaveabootloader29]].
	349
	350
24.4	351
24.5	352	=== 4.2.2 Configure certificate ===
24.2	353
	354
	355	After upgrade the firmware, the serial port displays as follows：
	356
	357	[[image:image-20240528174330-13.png\|\|height="286" width="568"]]
	358
	359
24.5	360	==== 4.2.2.1 Configure CA certificate ====
24.2	361
	362
	363	Please input the certificate in PEM format for the user.
	364
	365	Use the AT command AT+CACERT as follows:
	366
	367	AT+CACERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--
	368
	369	MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
	370
	371	ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6
	372
	373	b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL
	374
	375	MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv
	376
	377	b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj
	378
	379	ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM
	380
	381	9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw
	382
	383	IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6
	384
	385	VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L
	386
	387	93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm
	388
	389	jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
	390
	391	AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA
	392
	393	A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI
	394
	395	U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs
	396
	397	N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv
	398
	399	o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU
	400
	401	5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy
	402
	403	rqXRfboQnoZsG4q5WTP468SQvvG5
	404
	405	~-~-~-~--END CERTIFICATE~-~-~-~--}
	406
	407	(% style="color:red" %)Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
	408
	409	[[image:image-20240528174408-14.png]]
	410
	411
	412	After successful execution, as shown in the following figure.
	413
	414	[[image:image-20240528174502-15.png]]
	415
	416	Display (% style="color:blue" %)"Successfully configured CA certificate."(%%) If the configuration is successful, otherwise it is considered configuration failure.
	417
	418
24.5	419	==== 4.2.2.2 Configure client certificate ====
24.2	420
	421
	422	Use the AT command AT+CLICERT as follows：
	423
	424	AT+CLICERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--
	425
	426	MIIDWTCCAkGgAwIBAgIUYSpJUzfb4NTa76JJxd2th0fZA8swDQYJKoZIhvcNAQEL
	427
	428	BQAwTTFLMEkGA1UECwxCQW1hem9uIFdlYiBTZXJ2aWNlcyBPPUFtYXpvbi5jb20g
	429
	430	SW5jLiBMPVNlYXR0bGUgU1Q9V2FzaGluZ3RvbiBDPVVTMB4XDTI0MDUyNDA4MDI0
	431
	432	NVoXDTQ5MTIzMTIzNTk1OVowHjEcMBoGA1UEAwwTQVdTIElvVCBDZXJ0aWZpY2F0
	433
	434	ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTdc1GQLVBohAeCJD6n
	435
	436	6WTFAFrygTch90a5wUr2bhlVuDxvEhEKNcmu5vOCo5agmfLWb2VCxgezgvQOBYQ8
	437
	438	1oTqXJNdl4tS0DICfqb/ogVHWGHRao67XyhbPNBS0j/nCPTIIk6+/NBeYPOjaG+p
	439
	440	utfXE7SGIEcc3RevkYkUJx6y+WH7MLjj1mufuXBVWIL1RrfrIRPw6auVk7dhS5rU
	441
	442	NvYcJa7Qd6gpAh1DzPj7ZECrv7fEIIBDEsSYOy6ToWtzqGIVcIAHBDfORB0Hcm+N
	443
	444	7wG3KDf61P4aWkLlkP5pRUaUIQdVblxginmx2K3n8t/WP7QcfITa191rjEVVBXmk
	445
	446	ROsCAwEAAaNgMF4wHwYDVR0jBBgwFoAUs8Caohh1ZGP8kjSn3rtxJiJJ9IswHQYD
	447
	448	VR0OBBYEFCjwGwqD7FG9UCNm3wjFQX4HixzfMAwGA1UdEwEB/wQCMAAwDgYDVR0P
	449
	450	AQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQBgqI49a4PBQZYrFM63TX3EHgdd
	451
	452	N6Pj7AytjO+SrKNMCSo/OtIvhDTxOocr1vKrux1Tw5qmrllrIXLtlGtbmln5DS6a
	453
	454	DTCLrjwcIFIabLxpx5DPY1WSMYvL04SW7d4Y+3SxOFNRotDSiomr8eIIac0d3HE2
	455
	456	B5b0SnWZgWbrhjNUgvwo8l8tA9DOGIr2MeQ5kPjudOOiYSR3HC0v+jviBMV6VX8M
	457
	458	LHVH3CRshHDKBGpV1NZ1RAm9EY/oRGtSiMsyjRh6hegC0vehwVxaC4w9qG0ASkzz
	459
	460	42OOGfNqhYnYDiKTEIkazaoAFpTKDejWBaL7W5VpthUkQOl67IyX+ohuUKTo
	461
	462	~-~-~-~--END CERTIFICATE~-~-~-~--}
	463
	464	(% style="color:red" %)Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
	465
	466	[[image:image-20240528174630-16.png\|\|height="553" width="747"]]
	467
	468	Display (% style="color:blue" %)"Successfully configured client certificate."(%%) Configuration successful, otherwise configuration failed.
	469
	470
24.5	471	==== 4.2.2.3 Configure client private key ====
24.2	472
	473
	474	Use the AT command AT+CLIKEY, as shown below
	475
	476	AT+CLIKEY=~-~-~-~--BEGIN RSA PRIVATE KEY~-~-~-~--
	477
	478	MIIEpAIBAAKCAQEAxN1zUZAtUGiEB4IkPqfpZMUAWvKBNyH3RrnBSvZuGVW4PG8S
	479
	480	EQo1ya7m84KjlqCZ8tZvZULGB7OC9A4FhDzWhOpck12Xi1LQMgJ+pv+iBUdYYdFq
	481
	482	jrtfKFs80FLSP+cI9MgiTr780F5g86Nob6m619cTtIYgRxzdF6+RiRQnHrL5Yfsw
	483
	484	uOPWa5+5cFVYgvVGt+shE/Dpq5WTt2FLmtQ29hwlrtB3qCkCHUPM+PtkQKu/t8Qg
	485
	486	gEMSxJg7LpOha3OoYhVwgAcEN85EHQdyb43vAbcoN/rU/hpaQuWQ/mlFRpQhB1Vu
	487
	488	XGCKebHYrefy39Y/tBx8hNrX3WuMRVUFeaRE6wIDAQABAoIBAFhAOcjvjBDGuaEw
	489
	490	CxV3al49HfqnSZuwg0xWSztSm2qKDcwxsnSnEhO2b1vsTW9h0YGV9Vv8gg/Dvkmv
	491
	492	23M7XqM4+IUraJsRZbl1etdcM4KQSCOZoF4Zyv+pXuq4pf31kQNCkHaikWzLUkUG
	493
	494	FPQxr0vA49mCYwfd/ZL3ppM/0IWmxRwloV1Gb9q8iDBUcJGSDokZnT7diUxzzOcd
	495
	496	+UJ6xUhFq1v46Y7vO+73XROLv34JEBC0bIw2ErL6+AbzhHwb2mkuSccG9Ks37g3Z
	497
	498	dyyjjj8hm1wvHWepuWqEssaiS3HD5zAsI0v85xS8RwNj3zLfd8o1WC666n3CO+ij
	499
	500	VdRmR4kCgYEA+/sEFxpfaRomqcLwJebZcZH06U1RfJFfnbH2/Q6fANf8zNxwWs9A
	501
	502	O+jyk/CLhHYRIk6VIOMQmWwEYgJ2eAHfw2Diwj4/0eqkGu+yZOS6KTCewxSV73vc
	503
	504	SvACramJy4y6yEgDN5onwR1XqfVMfA0LzTcSupHR/xvrpf/gCsNFPxUCgYEAyAFd
	505
	506	nMUhJFSq3pOogxA43aJSkA8YuDS3jpBkKQ6vx81APpIMabQauOxFDt488TZGP3Yy
	507
	508	lhpa/lfFIgu2K7CgV4dUp+JtJJoZ/F+ExxUUzdqB4zxzWywAcc3RebfwP6qASwFT
	509
	510	G3mXYci4tgNWR+k5CSsuLXDk/OT5uo5GeGAEc/8CgYEAk6V8uxDP8STKnNRFpN/E
	511
	512	b6CHciDE64m/DgbWY2cq0fK9BUjxaLRhvfj8EqVzCrWnyoNjLHcAJfW+B7PLuPvY
	513
	514	IoJlvE1/Vb/4UnQ7ApVnY3VCwaoRRNc9uIcz+pAJ1sRqOarAf9cLDkPkNwktvM5k
	515
	516	KOXpSnrhIms4w/bPT18l9xUCgYBsAMDKbXEuK0JyGw5+Z/4tQQCQpnZU0rLkm3ha
	517
	518	64FkxaORplBprEZZ4cyQ8NW78/EPSAadI/JLMp5TejuPcDvFyGCgoBcMEuNBc1tC
	519
	520	HlIzr3FAgl5Qt3wt+FTMA9YKq0nINxjn10s2FKwaLccj4f9YwiaXh0VAg22PnlDT
	521
	522	pBYDhQKBgQCMwyKXJ4zYiDRdvLvgKzeuKaU4KNQItHE4KORPfkecjPoENt4bKxDw
	523
	524	2EdNFQLIoqBHL1s+/8+SzhCI31V7pkTs1AqCxDExJS7+8Z5NQFQIo/jooUo0N80E
	525
	526	y3ZZS6OLOXXscEqhMogf1grfbabXM9OkgTIq43cPQHtMGQiFAtIJkg==
	527
	528	~-~-~-~--END RSA PRIVATE KEY~-~-~-~--}
	529
	530	(% style="color:red" %)Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.
	531
	532	[[image:image-20240528174702-17.png]]
	533
	534	Display(% style="color:blue" %) "Successfully configured client private key."(%%) If the configuration is successful, otherwise it is considered configuration failure.
	535
	536
24.5	537	==== 4.2.2.4 For -CB /-CS model Certificate setting error/change certificate ====
24.2	538
24.4	539
24.2	540	(% data-sider-select-id="7c5a8abc-e707-467b-ac02-db0a89098320" %)When you set the wrong certificate or you need to re-set another certificate.
	541	Please use the following three commands：
	542
24.4	543	(% style="color:blue" %)AT+DELCLIKEY}
24.2	544
24.4	545	(% style="color:blue" %)AT+DELCLICERT}
24.2	546
24.4	547	(% style="color:blue" %)AT+DELCACERT}
24.2	548
	549
24.4	550	(% style="color:red" %)**Note: 1.When there is no certificate on the device, a deletion error will be displayed.
24.2	551	2.When the device already has a certificate, using the command to configure the certificate again will display a configuration error.**
	552
	553
	554	= (% data-sider-select-id="6b5deb69-539b-42e1-a7bc-a300eb1fea73" %)5. Configure draginoNB-device(%%) =
	555
22.1	556	== 5.1 Configure the data format sent by the device ==
	557
23.2	558
23.7	559	(% style="color:blue" %)AT+PRO=3,5(%%) (Data is in Json format of MQTT)
1.2	560
	561
22.1	562	== 5.2 Set server address ==
1.2	563
23.2	564
23.7	565	(% style="color:blue" %)AT+SERVADDR=an5tk94sdgjat-ats.iot.us-east-1.amazonaws.com,8883
1.2	566
	567
23.2	568	== 5.3 Set up private and public topics ==
1.2	569
23.2	570
1.2	571	AWS does not limit topics, so you can set any topic
	572
23.7	573	(% style="color:blue" %)AT+SUBTOPIC=Any
1.2	574
23.7	575	(% style="color:blue" %)AT+PUBTOPIC=Any
1.2	576
	577
22.1	578	== 5.4 Set the TLS mode ==
1.2	579
23.2	580
24.2	581	(% data-sider-select-id="cf7bb573-8375-4479-9801-df8bb7dab3ba" style="color:blue" %)AT+TLSMOD=1,2
1.2	582
23.7	583	To use the TLS mode certificate function, users need to configure the (% style="color:blue" %)AT+TLSMOD(%%) command.
1.2	584
23.7	585	(% style="color:blue" %)AT+TLSMOD=1,0 (%%) ~/~/ No authentication
1.2	586
23.7	587	(% style="color:blue" %)AT+TLSMOD=1,1 (%%) ~/~/ Perform server authentication
1.2	588
23.7	589	(% style="color:blue" %)AT+TLSMOD=1,2 (%%) ~/~/ Perform server and client authentication if requested by the remote server.(In AWS we recommend using this mode)
1.2	590
	591
24.2	592	(% data-sider-select-id="f443b9bc-1195-4fe2-965d-7de84f78747f" %)
24.4	593	== 5.5 Set the MQOS ==
1.2	594
24.4	595
24.2	596	(% data-sider-select-id="cf7bb573-8375-4479-9801-df8bb7dab3ba" style="color:blue; font-weight:bold" %)AT+MQOS(% data-sider-select-id="cf7bb573-8375-4479-9801-df8bb7dab3ba" style="color:blue" %)=XX （Depends on your server configuration）
23.2	597
24.2	598	Please find it in AWS's MQTT test client
	599
	600	[[image:image-20240529164339-1.png\|\|height="480" width="927"]]
	601
	602
	603	(% data-sider-select-id="fef22158-6e5e-46e4-b59e-fe457e562376" %)
	604	== 5.6 Restart the device ==
	605
	606
22.1	607	= 6. View data on AWS =
1.2	608
23.2	609	== 6.1 Find MQTT test client in test ==
1.2	610
23.2	611
1.2	612	In the fourth step, fill in the topics you subscribed to before
	613
23.7	614	(% style="color:blue" %)AT+PUBTOPIC=XXXX
1.2	615
	616	If you forget your previous topic, you can fill in #,subscribe to all topics
	617
22.1	618	[[image:image-20240528175111-18.png\|\|height="409" width="1014"]]
1.2	619
	620
23.5	621	== 6.2 The data published information in Subscriptions ==
1.2	622
22.1	623
	624	[[image:image-20240528175133-19.png\|\|height="563" width="1022"]]
	625
	626	[[image:image-20240528175154-20.png\|\|height="752" width="1042"]]

Wiki source code of Dragino NB device connection to AWS platform instructions

Applications

Navigation