Dragino NB device connection to AWS platform instructions

c. After clicking to enter the policy configuration page, follow the clicking sequence below to go to the json configuration interface, and then fill in the following fields in the "statement" keyword:

36

37

(% data-sider-select-id="7bc0f6db-481d-435a-ad0c-92cf0ede3ea4" %)

38

(% data-sider-select-id="8026a4d9-df91-4895-b9c5-3d6ac9b46012" %)**{**

39

40

**~ "Version": "2012-10-17",**

**~ "Statement": [**

**~ {**

**~ "Effect": "Allow",**

**~ "Action": "",**

**~ "Resource": ""**

**~ }**

**~ ]**

**}**

[[image:image-20240528173203-4.png||height="517" width="942"]]

60

61

62

d. Create this policy

63

64

65

= 3. Create a Things =

66

67

== 3.1 Create a single Things ==

68

69

70

(% style="color:blue" %)**1. Select Create Things**

71

72

[[image:image-20240528173244-5.png||height="329" width="932"]]

73

74

[[image:image-20240528173500-6.png||height="484" width="928"]]

75

76

77

(% style="color:blue" %)**2. Fill in the name of the control item you want to create in the thing name column**

78

79

Use the default for other parameters

Then click Next.

[[image:image-20240528173754-7.png||height="712" width="781"]]

84

85

86

(% style="color:blue" %)**3. Choose to automatically generate a new certificate**

Then click Next

[[image:image-20240528173829-8.png||height="547" width="782"]]

91

92

93

(% style="color:blue" %)**4. The next step is to choose a strategy**

94

95

Here you can choose a policy we created in the first step

96

97

[[image:image-20240528173851-9.png||height="580" width="785"]]

98

99

100

(% style="color:blue" %)**5. When you click to create things, the certificate download page will pop up**

101

102

(% data-sider-select-id="398c8d35-75ff-4077-85bb-9e0377efa186" %)

103

(% data-sider-select-id="087aa6c7-c542-4afc-9ce6-291538c31764" %)**This certificate is very important.**(%%) After creating the device, you must download the certificate of the device so that our NB device can connect normally.

104

105

Please download all the following certificates and put them in a folder.

106

107

[[image:image-20240528173926-10.png]]

108

109

110

(% style="color:blue" %)**6. You can see the things you just created in the things**

111

112

[[image:image-20240528173951-11.png||height="381" width="1089"]]

113

114

115

= 4. Connect to AWS using Dragino-NB device =

116

117

(% data-sider-select-id="0bc6b974-b38c-48e7-b228-e220f1938e7f" %)

118

== 4.1 F(% data-sider-select-id="293a2a9f-2191-4013-b0d9-8bcfb95a179a" %)or -NB /-NS model(%%) ==

119

120

=== (% data-sider-select-id="293a2a9f-2191-4013-b0d9-8bcfb95a179a" %)4.1.1 Upgrade the firmware to configure TTS firmware to set the certificate(%%) ===

121

122

123

User can change device firmware to::

124

125

* Update with new features.

* Fix bugs.

Firmware and changelog can be downloaded from : **[[Set up TLS certificate - Dropbox>>https://www.dropbox.com/scl/fo/1ykfsesmr3702tj3kp663/AOOyH1GiVEOGR41gASuiDk0?rlkey=1q7a1b5yvjgt87d16w8tt0cum&st=vdy765ut&dl=0||data-sider-select-id="830d1b64-cb24-48b3-91e4-49da5c3f0783"]]**

130

131

Methods to Update Firmware:

132

133

* (Recommended way) OTA firmware update via BLE: [[**Instruction**>>url:http://wiki.dragino.com/xwiki/bin/view/Main/BLE_Firmware_Update_NB_Sensors_BC660K-GL/]].

134

135

* Update through UART TTL interface : **[[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/UART_Access_for_NB_ST_BC660K-GL/#H4.2UpdateFirmware28Assumethedevicealreadyhaveabootloader29]]**.

136

137

=== (% data-sider-select-id="bb7de328-bb5d-4fe5-a008-7bf36bbf2d64" %)4.1.2 Configure certificate(%%) ===

138

139

140

After upgrade the firmware, the serial port displays as follows：

141

142

(% data-sider-select-id="8b6a9e23-dec0-476c-acd4-098aa19fe1f3" %)

143

[[image:image-20240528174330-13.png||height="286" width="568"]]

144

145

146

==== (% data-sider-select-id="4f272daa-a217-4469-8de7-f4905835bbad" %)4.1.2.1 Configure CA certificate(%%) ====

147

148

149

Please input the certificate in PEM format for the user.

150

151

Use the AT command AT+CACERT as follows:

152

153

AT+CACERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--

154

155

MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF

156

157

ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6

158

159

b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL

160

161

MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv

162

163

b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj

164

165

ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM

166

167

9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw

168

169

IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6

170

171

VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L

172

173

93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm

174

175

jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC

176

177

AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA

178

179

A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI

180

181

U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs

182

183

N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv

184

185

o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU

186

187

5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy

188

189

rqXRfboQnoZsG4q5WTP468SQvvG5

190

191

~-~-~-~--END CERTIFICATE~-~-~-~--}

192

193

(% style="color:red" %)**Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.**

194

195

[[image:image-20240528174408-14.png]]

196

197

198

After successful execution, as shown in the following figure.

199

200

[[image:image-20240528174502-15.png]]

201

202

Display (% style="color:blue" %)**"Successfully configured CA certificate."**(%%) If the configuration is successful, otherwise it is considered configuration failure.

203

204

205

==== (% data-sider-select-id="0b9009b4-385e-4e1e-91d4-0175c1af339d" %)4.1.2.2 Configure client certificate(%%) ====

206

207

208

Use the AT command AT+CLICERT as follows：

209

210

AT+CLICERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--

211

212

MIIDWTCCAkGgAwIBAgIUYSpJUzfb4NTa76JJxd2th0fZA8swDQYJKoZIhvcNAQEL

213

214

BQAwTTFLMEkGA1UECwxCQW1hem9uIFdlYiBTZXJ2aWNlcyBPPUFtYXpvbi5jb20g

215

216

SW5jLiBMPVNlYXR0bGUgU1Q9V2FzaGluZ3RvbiBDPVVTMB4XDTI0MDUyNDA4MDI0

217

218

NVoXDTQ5MTIzMTIzNTk1OVowHjEcMBoGA1UEAwwTQVdTIElvVCBDZXJ0aWZpY2F0

219

220

ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTdc1GQLVBohAeCJD6n

221

222

6WTFAFrygTch90a5wUr2bhlVuDxvEhEKNcmu5vOCo5agmfLWb2VCxgezgvQOBYQ8

223

224

1oTqXJNdl4tS0DICfqb/ogVHWGHRao67XyhbPNBS0j/nCPTIIk6+/NBeYPOjaG+p

225

226

utfXE7SGIEcc3RevkYkUJx6y+WH7MLjj1mufuXBVWIL1RrfrIRPw6auVk7dhS5rU

227

228

NvYcJa7Qd6gpAh1DzPj7ZECrv7fEIIBDEsSYOy6ToWtzqGIVcIAHBDfORB0Hcm+N

229

230

7wG3KDf61P4aWkLlkP5pRUaUIQdVblxginmx2K3n8t/WP7QcfITa191rjEVVBXmk

231

232

ROsCAwEAAaNgMF4wHwYDVR0jBBgwFoAUs8Caohh1ZGP8kjSn3rtxJiJJ9IswHQYD

233

234

VR0OBBYEFCjwGwqD7FG9UCNm3wjFQX4HixzfMAwGA1UdEwEB/wQCMAAwDgYDVR0P

235

236

AQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQBgqI49a4PBQZYrFM63TX3EHgdd

237

238

N6Pj7AytjO+SrKNMCSo/OtIvhDTxOocr1vKrux1Tw5qmrllrIXLtlGtbmln5DS6a

239

240

DTCLrjwcIFIabLxpx5DPY1WSMYvL04SW7d4Y+3SxOFNRotDSiomr8eIIac0d3HE2

241

242

B5b0SnWZgWbrhjNUgvwo8l8tA9DOGIr2MeQ5kPjudOOiYSR3HC0v+jviBMV6VX8M

243

244

LHVH3CRshHDKBGpV1NZ1RAm9EY/oRGtSiMsyjRh6hegC0vehwVxaC4w9qG0ASkzz

245

246

42OOGfNqhYnYDiKTEIkazaoAFpTKDejWBaL7W5VpthUkQOl67IyX+ohuUKTo

247

248

~-~-~-~--END CERTIFICATE~-~-~-~--}

249

250

(% style="color:red" %)**Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.**

251

252

[[image:image-20240528174630-16.png||height="553" width="747"]]

253

254

Display (% style="color:blue" %)**"Successfully configured client certificate."**(%%) Configuration successful, otherwise configuration failed.

255

256

257

==== (% data-sider-select-id="7c5a8abc-e707-467b-ac02-db0a89098320" %)4.1.2.3 Configure client private key(%%) ====

258

259

260

Use the AT command AT+CLIKEY, as shown below

261

262

AT+CLIKEY=~-~-~-~--BEGIN RSA PRIVATE KEY~-~-~-~--

263

264

MIIEpAIBAAKCAQEAxN1zUZAtUGiEB4IkPqfpZMUAWvKBNyH3RrnBSvZuGVW4PG8S

265

266

EQo1ya7m84KjlqCZ8tZvZULGB7OC9A4FhDzWhOpck12Xi1LQMgJ+pv+iBUdYYdFq

267

268

jrtfKFs80FLSP+cI9MgiTr780F5g86Nob6m619cTtIYgRxzdF6+RiRQnHrL5Yfsw

269

270

uOPWa5+5cFVYgvVGt+shE/Dpq5WTt2FLmtQ29hwlrtB3qCkCHUPM+PtkQKu/t8Qg

271

272

gEMSxJg7LpOha3OoYhVwgAcEN85EHQdyb43vAbcoN/rU/hpaQuWQ/mlFRpQhB1Vu

273

274

XGCKebHYrefy39Y/tBx8hNrX3WuMRVUFeaRE6wIDAQABAoIBAFhAOcjvjBDGuaEw

275

276

CxV3al49HfqnSZuwg0xWSztSm2qKDcwxsnSnEhO2b1vsTW9h0YGV9Vv8gg/Dvkmv

277

278

23M7XqM4+IUraJsRZbl1etdcM4KQSCOZoF4Zyv+pXuq4pf31kQNCkHaikWzLUkUG

279

280

FPQxr0vA49mCYwfd/ZL3ppM/0IWmxRwloV1Gb9q8iDBUcJGSDokZnT7diUxzzOcd

281

282

+UJ6xUhFq1v46Y7vO+73XROLv34JEBC0bIw2ErL6+AbzhHwb2mkuSccG9Ks37g3Z

283

284

dyyjjj8hm1wvHWepuWqEssaiS3HD5zAsI0v85xS8RwNj3zLfd8o1WC666n3CO+ij

285

286

VdRmR4kCgYEA+/sEFxpfaRomqcLwJebZcZH06U1RfJFfnbH2/Q6fANf8zNxwWs9A

287

288

O+jyk/CLhHYRIk6VIOMQmWwEYgJ2eAHfw2Diwj4/0eqkGu+yZOS6KTCewxSV73vc

289

290

SvACramJy4y6yEgDN5onwR1XqfVMfA0LzTcSupHR/xvrpf/gCsNFPxUCgYEAyAFd

291

292

nMUhJFSq3pOogxA43aJSkA8YuDS3jpBkKQ6vx81APpIMabQauOxFDt488TZGP3Yy

293

294

lhpa/lfFIgu2K7CgV4dUp+JtJJoZ/F+ExxUUzdqB4zxzWywAcc3RebfwP6qASwFT

295

296

G3mXYci4tgNWR+k5CSsuLXDk/OT5uo5GeGAEc/8CgYEAk6V8uxDP8STKnNRFpN/E

297

298

b6CHciDE64m/DgbWY2cq0fK9BUjxaLRhvfj8EqVzCrWnyoNjLHcAJfW+B7PLuPvY

299

300

IoJlvE1/Vb/4UnQ7ApVnY3VCwaoRRNc9uIcz+pAJ1sRqOarAf9cLDkPkNwktvM5k

301

302

KOXpSnrhIms4w/bPT18l9xUCgYBsAMDKbXEuK0JyGw5+Z/4tQQCQpnZU0rLkm3ha

303

304

64FkxaORplBprEZZ4cyQ8NW78/EPSAadI/JLMp5TejuPcDvFyGCgoBcMEuNBc1tC

305

306

HlIzr3FAgl5Qt3wt+FTMA9YKq0nINxjn10s2FKwaLccj4f9YwiaXh0VAg22PnlDT

307

308

pBYDhQKBgQCMwyKXJ4zYiDRdvLvgKzeuKaU4KNQItHE4KORPfkecjPoENt4bKxDw

309

310

2EdNFQLIoqBHL1s+/8+SzhCI31V7pkTs1AqCxDExJS7+8Z5NQFQIo/jooUo0N80E

311

312

y3ZZS6OLOXXscEqhMogf1grfbabXM9OkgTIq43cPQHtMGQiFAtIJkg==

313

314

~-~-~-~--END RSA PRIVATE KEY~-~-~-~--}

315

316

(% style="color:red" %)**Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.**

317

318

[[image:image-20240528174702-17.png]]

319

320

Display(% style="color:blue" %)** "Successfully configured client private key."**(%%) If the configuration is successful, otherwise it is considered configuration failure.

321

322

323

==== (% data-sider-select-id="9c62fd56-4ff5-48af-8cca-db4565d1f25d" %)4.1.2.4 Re-upgrade the firmware(%%) ====

324

325

326

After the certificate configuration is completed, Re-upgrade to the firmware you originally used.

327

328

329

(% data-sider-select-id="02f5aceb-0a5d-4922-8c3a-7e6772f46ad4" %)

330

== 4.2 For -CB /-CS model ==

331

332

(% class="wikigeneratedid" data-sider-select-id="02f5aceb-0a5d-4922-8c3a-7e6772f46ad4" %)

333

=== 4.2.1 Upgrade the firmware to configure TTS firmware to set the certificate ===

334

335

336

User can change device firmware to::

337

338

* Update with new features.

* Fix bugs.

Firmware and changelog can be downloaded from : **[[Set up TLS certificate - Dropbox>>https://www.dropbox.com/scl/fo/mk9u5ux3cfo94ke0s67ik/ADOIOdwIQfCO2WUZt0MxXyU?rlkey=7o6uaywrebbnsvuj4r0r694x6&st=smrmjj7t&dl=0||data-sider-select-id="830d1b64-cb24-48b3-91e4-49da5c3f0783"]]**

343

344

Methods to Update Firmware:

345

346

* (Recommended way) OTA firmware update via BLE: [[**Instruction**>>url:http://wiki.dragino.com/xwiki/bin/view/Main/BLE_Firmware_Update_NB_Sensors_BC660K-GL/]].

347

348

* Update through UART TTL interface : **[[Instruction>>url:http://wiki.dragino.com/xwiki/bin/view/Main/UART_Access_for_NB_ST_BC660K-GL/#H4.2UpdateFirmware28Assumethedevicealreadyhaveabootloader29]]**.

=== 4.2.2 Configure certificate ===

353

354

355

After upgrade the firmware, the serial port displays as follows：

356

357

[[image:image-20240528174330-13.png||height="286" width="568"]]

358

359

360

==== 4.2.2.1 Configure CA certificate ====

361

362

363

Please input the certificate in PEM format for the user.

364

365

Use the AT command AT+CACERT as follows:

366

367

AT+CACERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--

368

369

MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF

370

371

ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6

372

373

b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL

374

375

MAkGA1UEBhMCVVMxDzANBgNVBAoTBkFtYXpvbjEZMBcGA1UEAxMQQW1hem9uIFJv

376

377

b3QgQ0EgMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ4gHHKeNXj

378

379

ca9HgFB0fW7Y14h29Jlo91ghYPl0hAEvrAIthtOgQ3pOsqTQNroBvo3bSMgHFzZM

380

381

9O6II8c+6zf1tRn4SWiw3te5djgdYZ6k/oI2peVKVuRF4fn9tBb6dNqcmzU5L/qw

382

383

IFAGbHrQgLKm+a/sRxmPUDgH3KKHOVj4utWp+UhnMJbulHheb4mjUcAwhmahRWa6

384

385

VOujw5H5SNz/0egwLX0tdHA114gk957EWW67c4cX8jJGKLhD+rcdqsq08p8kDi1L

386

387

93FcXmn/6pUCyziKrlA4b9v7LWIbxcceVOF34GfID5yHI9Y/QCB/IIDEgEw+OyQm

388

389

jgSubJrIqg0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC

390

391

AYYwHQYDVR0OBBYEFIQYzIU07LwMlJQuCFmcx7IQTgoIMA0GCSqGSIb3DQEBCwUA

392

393

A4IBAQCY8jdaQZChGsV2USggNiMOruYou6r4lK5IpDB/G/wkjUu0yKGX9rbxenDI

394

395

U5PMCCjjmCXPI6T53iHTfIUJrU6adTrCC2qJeHZERxhlbI1Bjjt/msv0tadQ1wUs

396

397

N+gDS63pYaACbvXy8MWy7Vu33PqUXHeeE6V/Uq2V8viTO96LXFvKWlJbYK8U90vv

398

399

o/ufQJVtMVT8QtPHRh8jrdkPSHCa2XV4cdFyQzR1bldZwgJcJmApzyMZFo6IQ6XU

400

401

5MsI+yMRQ+hDKXJioaldXgjUkK642M4UwtBV8ob2xJNDd2ZhwLnoQdeXeGADbkpy

402

403

rqXRfboQnoZsG4q5WTP468SQvvG5

404

405

~-~-~-~--END CERTIFICATE~-~-~-~--}

406

407

(% style="color:red" %)**Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.**

408

409

[[image:image-20240528174408-14.png]]

410

411

412

After successful execution, as shown in the following figure.

413

414

[[image:image-20240528174502-15.png]]

415

416

Display (% style="color:blue" %)**"Successfully configured CA certificate."**(%%) If the configuration is successful, otherwise it is considered configuration failure.

417

418

419

==== 4.2.2.2 Configure client certificate ====

420

421

422

Use the AT command AT+CLICERT as follows：

423

424

AT+CLICERT=~-~-~-~--BEGIN CERTIFICATE~-~-~-~--

425

426

MIIDWTCCAkGgAwIBAgIUYSpJUzfb4NTa76JJxd2th0fZA8swDQYJKoZIhvcNAQEL

427

428

BQAwTTFLMEkGA1UECwxCQW1hem9uIFdlYiBTZXJ2aWNlcyBPPUFtYXpvbi5jb20g

429

430

SW5jLiBMPVNlYXR0bGUgU1Q9V2FzaGluZ3RvbiBDPVVTMB4XDTI0MDUyNDA4MDI0

431

432

NVoXDTQ5MTIzMTIzNTk1OVowHjEcMBoGA1UEAwwTQVdTIElvVCBDZXJ0aWZpY2F0

433

434

ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTdc1GQLVBohAeCJD6n

435

436

6WTFAFrygTch90a5wUr2bhlVuDxvEhEKNcmu5vOCo5agmfLWb2VCxgezgvQOBYQ8

437

438

1oTqXJNdl4tS0DICfqb/ogVHWGHRao67XyhbPNBS0j/nCPTIIk6+/NBeYPOjaG+p

439

440

utfXE7SGIEcc3RevkYkUJx6y+WH7MLjj1mufuXBVWIL1RrfrIRPw6auVk7dhS5rU

441

442

NvYcJa7Qd6gpAh1DzPj7ZECrv7fEIIBDEsSYOy6ToWtzqGIVcIAHBDfORB0Hcm+N

443

444

7wG3KDf61P4aWkLlkP5pRUaUIQdVblxginmx2K3n8t/WP7QcfITa191rjEVVBXmk

445

446

ROsCAwEAAaNgMF4wHwYDVR0jBBgwFoAUs8Caohh1ZGP8kjSn3rtxJiJJ9IswHQYD

447

448

VR0OBBYEFCjwGwqD7FG9UCNm3wjFQX4HixzfMAwGA1UdEwEB/wQCMAAwDgYDVR0P

449

450

AQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4IBAQBgqI49a4PBQZYrFM63TX3EHgdd

451

452

N6Pj7AytjO+SrKNMCSo/OtIvhDTxOocr1vKrux1Tw5qmrllrIXLtlGtbmln5DS6a

453

454

DTCLrjwcIFIabLxpx5DPY1WSMYvL04SW7d4Y+3SxOFNRotDSiomr8eIIac0d3HE2

455

456

B5b0SnWZgWbrhjNUgvwo8l8tA9DOGIr2MeQ5kPjudOOiYSR3HC0v+jviBMV6VX8M

457

458

LHVH3CRshHDKBGpV1NZ1RAm9EY/oRGtSiMsyjRh6hegC0vehwVxaC4w9qG0ASkzz

459

460

42OOGfNqhYnYDiKTEIkazaoAFpTKDejWBaL7W5VpthUkQOl67IyX+ohuUKTo

461

462

~-~-~-~--END CERTIFICATE~-~-~-~--}

463

464

(% style="color:red" %)**Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.**

465

466

[[image:image-20240528174630-16.png||height="553" width="747"]]

467

468

Display (% style="color:blue" %)**"Successfully configured client certificate."**(%%) Configuration successful, otherwise configuration failed.

469

470

471

==== 4.2.2.3 Configure client private key ====

472

473

474

Use the AT command AT+CLIKEY, as shown below

475

476

AT+CLIKEY=~-~-~-~--BEGIN RSA PRIVATE KEY~-~-~-~--

477

478

MIIEpAIBAAKCAQEAxN1zUZAtUGiEB4IkPqfpZMUAWvKBNyH3RrnBSvZuGVW4PG8S

479

480

EQo1ya7m84KjlqCZ8tZvZULGB7OC9A4FhDzWhOpck12Xi1LQMgJ+pv+iBUdYYdFq

481

482

jrtfKFs80FLSP+cI9MgiTr780F5g86Nob6m619cTtIYgRxzdF6+RiRQnHrL5Yfsw

483

484

uOPWa5+5cFVYgvVGt+shE/Dpq5WTt2FLmtQ29hwlrtB3qCkCHUPM+PtkQKu/t8Qg

485

486

gEMSxJg7LpOha3OoYhVwgAcEN85EHQdyb43vAbcoN/rU/hpaQuWQ/mlFRpQhB1Vu

487

488

XGCKebHYrefy39Y/tBx8hNrX3WuMRVUFeaRE6wIDAQABAoIBAFhAOcjvjBDGuaEw

489

490

CxV3al49HfqnSZuwg0xWSztSm2qKDcwxsnSnEhO2b1vsTW9h0YGV9Vv8gg/Dvkmv

491

492

23M7XqM4+IUraJsRZbl1etdcM4KQSCOZoF4Zyv+pXuq4pf31kQNCkHaikWzLUkUG

493

494

FPQxr0vA49mCYwfd/ZL3ppM/0IWmxRwloV1Gb9q8iDBUcJGSDokZnT7diUxzzOcd

495

496

+UJ6xUhFq1v46Y7vO+73XROLv34JEBC0bIw2ErL6+AbzhHwb2mkuSccG9Ks37g3Z

497

498

dyyjjj8hm1wvHWepuWqEssaiS3HD5zAsI0v85xS8RwNj3zLfd8o1WC666n3CO+ij

499

500

VdRmR4kCgYEA+/sEFxpfaRomqcLwJebZcZH06U1RfJFfnbH2/Q6fANf8zNxwWs9A

501

502

O+jyk/CLhHYRIk6VIOMQmWwEYgJ2eAHfw2Diwj4/0eqkGu+yZOS6KTCewxSV73vc

503

504

SvACramJy4y6yEgDN5onwR1XqfVMfA0LzTcSupHR/xvrpf/gCsNFPxUCgYEAyAFd

505

506

nMUhJFSq3pOogxA43aJSkA8YuDS3jpBkKQ6vx81APpIMabQauOxFDt488TZGP3Yy

507

508

lhpa/lfFIgu2K7CgV4dUp+JtJJoZ/F+ExxUUzdqB4zxzWywAcc3RebfwP6qASwFT

509

510

G3mXYci4tgNWR+k5CSsuLXDk/OT5uo5GeGAEc/8CgYEAk6V8uxDP8STKnNRFpN/E

511

512

b6CHciDE64m/DgbWY2cq0fK9BUjxaLRhvfj8EqVzCrWnyoNjLHcAJfW+B7PLuPvY

513

514

IoJlvE1/Vb/4UnQ7ApVnY3VCwaoRRNc9uIcz+pAJ1sRqOarAf9cLDkPkNwktvM5k

515

516

KOXpSnrhIms4w/bPT18l9xUCgYBsAMDKbXEuK0JyGw5+Z/4tQQCQpnZU0rLkm3ha

517

518

64FkxaORplBprEZZ4cyQ8NW78/EPSAadI/JLMp5TejuPcDvFyGCgoBcMEuNBc1tC

519

520

HlIzr3FAgl5Qt3wt+FTMA9YKq0nINxjn10s2FKwaLccj4f9YwiaXh0VAg22PnlDT

521

522

pBYDhQKBgQCMwyKXJ4zYiDRdvLvgKzeuKaU4KNQItHE4KORPfkecjPoENt4bKxDw

523

524

2EdNFQLIoqBHL1s+/8+SzhCI31V7pkTs1AqCxDExJS7+8Z5NQFQIo/jooUo0N80E

525

526

y3ZZS6OLOXXscEqhMogf1grfbabXM9OkgTIq43cPQHtMGQiFAtIJkg==

527

528

~-~-~-~--END RSA PRIVATE KEY~-~-~-~--}

529

530

(% style="color:red" %)**Note: Be sure to add a terminator "}" at the end of the command. Otherwise, the command will not execute successfully.**

531

532

[[image:image-20240528174702-17.png]]

533

534

Display(% style="color:blue" %)** "Successfully configured client private key."**(%%) If the configuration is successful, otherwise it is considered configuration failure.

535

536

537

==== 4.2.2.4 For -CB /-CS model Certificate setting error/change certificate ====

538

539

540

(% data-sider-select-id="7c5a8abc-e707-467b-ac02-db0a89098320" %)When you set the wrong certificate or you need to re-set another certificate.

541

Please use the following three commands：

542

543

(% style="color:blue" %)**AT+DELCLIKEY}**

544

545

(% style="color:blue" %)**AT+DELCLICERT}**

546

547

(% style="color:blue" %)**AT+DELCACERT}**

548

549

550

(% style="color:red" %)**Note: 1.When there is no certificate on the device, a deletion error will be displayed.

551

2.When the device already has a certificate, using the command to configure the certificate again will display a configuration error.**

552

553

554

= (% data-sider-select-id="6b5deb69-539b-42e1-a7bc-a300eb1fea73" %)5. Configure draginoNB-device(%%) =

555

556

== 5.1 Configure the data format sent by the device ==

557

558

559

(% style="color:blue" %)**AT+PRO=3,5**(%%) (Data is in Json format of MQTT)

560

561

562

== 5.2 Set server address ==

563

564

565

(% style="color:blue" %)**AT+SERVADDR=an5tk94sdgjat-ats.iot.us-east-1.amazonaws.com,8883**

566

567

568

== 5.3 Set up private and public topics ==

569

570

571

AWS does not limit topics, so you can set any topic

572

573

(% style="color:blue" %)**AT+SUBTOPIC=Any**

574

575

(% style="color:blue" %)**AT+PUBTOPIC=Any**

576

577

578

== 5.4 Set the TLS mode ==

579

580

581

(% data-sider-select-id="cf7bb573-8375-4479-9801-df8bb7dab3ba" style="color:blue" %)**AT+TLSMOD=1,2**

582

583

To use the TLS mode certificate function, users need to configure the (% style="color:blue" %)**AT+TLSMOD**(%%) command.

584

585

(% style="color:blue" %)**AT+TLSMOD=1,0** (%%) ~/~/ No authentication

586

587

(% style="color:blue" %)**AT+TLSMOD=1,1** (%%) ~/~/ Perform server authentication

588

589

(% style="color:blue" %)**AT+TLSMOD=1,2** (%%) ~/~/ Perform server and client authentication if requested by the remote server.(In AWS we recommend using this mode)

590

591

592

(% data-sider-select-id="f443b9bc-1195-4fe2-965d-7de84f78747f" %)

593

== 5.5 Set the MQOS ==

594

595

596

(% data-sider-select-id="cf7bb573-8375-4479-9801-df8bb7dab3ba" style="color:blue; font-weight:bold" %)**AT+MQOS**(% data-sider-select-id="cf7bb573-8375-4479-9801-df8bb7dab3ba" style="color:blue" %)**=XX （Depends on your server configuration）**

597

598

Please find it in AWS's MQTT test client

599

600

[[image:image-20240529164339-1.png||height="480" width="927"]]

601

602

603

(% data-sider-select-id="fef22158-6e5e-46e4-b59e-fe457e562376" %)

604

== 5.6 Restart the device ==