Skip to content

Commit 2e20a31

Browse files
committed
Separate 1.4 and pre-1.4
1 parent 9f01f96 commit 2e20a31

File tree

1 file changed

+26
-0
lines changed

1 file changed

+26
-0
lines changed

articles/iot-edge/how-to-provision-devices-at-scale-linux-tpm.md

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -141,6 +141,29 @@ After the installation is finished and you've signed back in to your VM, you're
141141

142142
## Retrieve provisioning information for your TPM
143143

144+
<!-- 1.1 -->
145+
:::moniker range="<iotedge-1.4"
146+
In this section, you build a tool that you can use to retrieve the registration ID and endorsement key for your TPM.
147+
148+
1. Sign in to your device, and then follow the steps in [Set up a Linux development environment](https://github.com/Azure/azure-iot-sdk-c/blob/master/doc/devbox_setup.md#linux) to install and build the Azure IoT device SDK for C.
149+
150+
1. Run the following commands to build the SDK tool that retrieves your device provisioning information for your TPM.
151+
152+
```bash
153+
cd azure-iot-sdk-c/cmake
154+
cmake -Duse_prov_client:BOOL=ON ..
155+
cd provisioning_client/tools/tpm_device_provision
156+
make
157+
sudo ./tpm_device_provision
158+
```
159+
1. The output window displays the device's **Registration ID** and the **Endorsement key**. Copy these values for use later when you create an individual enrollment for your device in the device provisioning service.
160+
161+
:::moniker-end
162+
<!-- end 1.1 -->
163+
164+
<!-- iotedge-1.4 -->
165+
:::moniker range=">=iotedge-1.4"
166+
144167
In this section, you use the TPM2 software tools to retrieve the endorsement key for your TPM and then generate a unique registration ID.
145168

146169
# [Ubuntu / Debian / Raspberry Pi OS](#tab/ubuntu+debian+rpios)
@@ -179,6 +202,9 @@ In this section, you use the TPM2 software tools to retrieve the endorsement key
179202

180203
---
181204

205+
:::moniker-end
206+
<!-- end iotedge-1.4 -->
207+
182208
> [!TIP]
183209
> If you don't want to use the TPM2 software tools to retrieve the information, you need to find another way to obtain the provisioning information. The endorsement key, which is unique to each TPM chip, is obtained from the TPM chip manufacturer associated with it. You can derive a unique registration ID for your TPM device. For example, you can create an SHA-256 hash of the endorsement key.
184210

0 commit comments

Comments
 (0)