You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/iot-central/core/concepts-device-authentication.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ title: Device authentication in Azure IoT Central
3
3
description: This article introduces key IoT Central device authentication concepts such as enrollment groups, shared access signatures, and X.509 certificates.
This article describes how devices authenticate to an IoT Central application. To learn more about the overall connection process, see [Connect a device](overview-iot-central-developer.md#how-devices-connect).
18
+
This article describes how devices authenticate to an IoT Central application. To learn more about the overall connection process, see [How devices connect](overview-iot-central-developer.md#how-devices-connect).
19
19
20
20
Devices authenticate with the IoT Central application by using either a _shared access signature (SAS) token_ or an _X.509 certificate_. X.509 certificates are recommended in production environments.
21
21
@@ -31,7 +31,7 @@ Each of these authentication options requires that each device has a unique devi
31
31
32
32
## X.509 enrollment group
33
33
34
-
In a production environment, using X.509 certificates is the recommended device authentication mechanism for IoT Central. To learn more, see [Device Authentication using X.509 CA Certificates](../../iot-hub/iot-hub-x509ca-overview.md).
34
+
In a production environment, using X.509 certificates is the recommended device authentication mechanism for IoT Central. To learn more, see [Authenticate identities with X.509 certificates](../../iot-hub/iot-hub-x509ca-overview.md).
35
35
36
36
An X.509 enrollment group contains a root or intermediate X.509 certificate. Devices can authenticate if they have a valid leaf certificate derived from the root or intermediate certificate.
37
37
@@ -43,14 +43,14 @@ To connect a device with an X.509 certificate to your application:
43
43
44
44
Each enrollment group should use a unique X.509 certificate. IoT Central doesn't support using the same X.509 certificate across multiple enrollment groups.
45
45
46
-
To learn more, see [How to connect devices with X.509 certificates](how-to-connect-devices-x509.md).
46
+
To learn more, see [How to connect devices with X.509 certificates to IoT Central Application](how-to-connect-devices-x509.md).
47
47
48
48
### For testing purposes only
49
49
50
50
In a production environment, use certificates from your certificate provider. For testing only, you can use the following utilities to generate root, intermediate, and device certificates:
51
51
52
-
-[Tools for the Azure IoT Device Provisioning Device SDK](https://github.com/Azure/azure-iot-sdk-node/blob/main/provisioning/tools/readme.md): a collection of Node.js tools that you can use to generate and verify X.509 certificates and keys.
53
-
-[Manage test CA certificates for samples and tutorials](https://github.com/Azure/azure-iot-sdk-c/blob/master/tools/CACertificates/CACertificateOverview.md): a collection of PowerShell and Bash scripts to:
52
+
-[Tools for the Azure IoT Device Provisioning Device SDK for Node.js](https://github.com/Azure/azure-iot-sdk-node/blob/main/provisioning/tools/readme.md): a collection of Node.js tools that you can use to generate and verify X.509 certificates and keys.
53
+
-[Managing test CA certificates for samples and tutorials](https://github.com/Azure/azure-iot-sdk-c/blob/master/tools/CACertificates/CACertificateOverview.md): a collection of PowerShell and Bash scripts to:
54
54
- Create a certificate chain.
55
55
- Save the certificates as .cer files to upload to your IoT Central application.
56
56
- Use the verification code from the IoT Central application to generate the verification certificate.
@@ -82,7 +82,7 @@ If you use the default **SAS-IoT-Devices** enrollment group, IoT Central generat
82
82
83
83
## Individual enrollment
84
84
85
-
Typically, devices connect by using credentials derived from an enrollment group X.509 certificate or SAS key. However, if your devices each have their own credentials, you can use individual enrollments. An individual enrollment is an entry for a single device allowing it to connect. Individual enrollments can use either X.509 leaf certificates or SAS tokens (from a physical or virtual trusted platform module) as attestation mechanisms. For more information, see [DPS individual enrollment](../../iot-dps/concepts-service.md#individual-enrollment).
85
+
Typically, devices connect by using credentials derived from an enrollment group X.509 certificate or SAS key. However, if your devices each have their own credentials, you can use individual enrollments. An individual enrollment is an entry for a single device allowing it to connect. Individual enrollments can use either X.509 leaf certificates or SAS tokens (from a physical or virtual trusted platform module) as attestation mechanisms. For more information, see [Individual enrollment](../../iot-dps/concepts-service.md#individual-enrollment).
86
86
87
87
> [!NOTE]
88
88
> When you create an individual enrollment for a device, it takes precedence over the default enrollment group options in your IoT Central application.
@@ -145,6 +145,6 @@ Some suggested next steps are to:
145
145
146
146
- Review [best practices](concepts-device-implementation.md#best-practices) for developing devices.
147
147
- Review some sample code that shows how to use SAS tokens in [Tutorial: Create and connect a client application to your Azure IoT Central application](tutorial-connect-device.md)
148
-
- Learn how to [How to connect devices with X.509 certificates using Node.js device SDK for IoT Central Application](how-to-connect-devices-x509.md)
149
-
- Learn how to [Monitor device connectivity using Azure CLI](./howto-monitor-devices-azure-cli.md)
148
+
- Learn [how to connect devices with X.509 certificates to IoT Central Application](how-to-connect-devices-x509.md)
149
+
- Learn how to [monitor device connectivity using Azure CLI](./howto-monitor-devices-azure-cli.md)
150
150
- Read about [Azure IoT Edge devices and Azure IoT Central](./concepts-iot-edge.md)
0 commit comments