You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/iot-dps/about-iot-dps.md
+26-26Lines changed: 26 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,55 +1,55 @@
1
1
---
2
2
title: Overview of Azure IoT Hub Device Provisioning Service | Microsoft Docs
3
3
description: Describes device provisioning in Azure with the Device Provisioning Service (DPS) and IoT Hub
4
-
author: nberdy
5
-
ms.author: nberdy
4
+
author: wesmc7777
5
+
ms.author: wesmc
6
6
ms.date: 04/04/2019
7
7
ms.topic: overview
8
8
ms.service: iot-dps
9
9
services: iot-dps
10
-
manager: briz
10
+
manager: eliotgra
11
11
---
12
12
13
13
# Provisioning devices with Azure IoT Hub Device Provisioning Service
14
-
Microsoft Azure provides a rich set of integrated public cloud services for all your IoT solution needs. The IoT Hub Device Provisioning Service is a helper service for IoT Hub that enables zero-touch, just-in-time provisioning to the right IoT hub without requiring human intervention, enabling customers to provision millions of devices in a secure and scalable manner.
14
+
Microsoft Azure provides a rich set of integrated public cloud services for all your IoT solution needs. The IoT Hub Device Provisioning Service (DPS) is a helper service for IoT Hub that enables zero-touch, just-in-time provisioning to the right IoT hub without requiring human intervention. DPS enables the provisioning of millions of devices in a secure and scalable manner.
15
15
16
16
## When to use Device Provisioning Service
17
-
There are many provisioning scenarios in which the Device Provisioning Service is an excellent choice for getting devices connected and configured to IoT Hub, such as:
17
+
There are many provisioning scenarios in which DPS is an excellent choice for getting devices connected and configured to IoT Hub, such as:
18
18
19
19
* Zero-touch provisioning to a single IoT solution without hardcoding IoT Hub connection information at the factory (initial setup)
20
-
* Loadbalancing devices across multiple hubs
20
+
* Load-balancing devices across multiple hubs
21
21
* Connecting devices to their owner’s IoT solution based on sales transaction data (multitenancy)
22
22
* Connecting devices to a particular IoT solution depending on use-case (solution isolation)
23
23
* Connecting a device to the IoT hub with the lowest latency (geo-sharding)
24
24
* Reprovisioning based on a change in the device
25
25
* Rolling the keys used by the device to connect to IoT Hub (when not using X.509 certificates to connect)
26
26
27
27
## Behind the scenes
28
-
All the scenarios listed in the previous section can be done using the provisioning service for zero-touch provisioning with the same flow. Many of the manual steps traditionally involved in provisioning are automated with the Device Provisioning Service to reduce the time to deploy IoT devices and lower the risk of manual error. The following section describes what goes on behind the scenes to get a device provisioned. The first step is manual, all of the following steps are automated.
28
+
All the scenarios listed in the previous section can be done using DPS for zero-touch provisioning with the same flow. Many of the manual steps traditionally involved in provisioning are automated with DPS to reduce the time to deploy IoT devices and lower the risk of manual error. The following section describes what goes on behind the scenes to get a device provisioned. The first step is manual, all of the following steps are automated.
1. Device manufacturer adds the device registration information to the enrollment list in the Azure portal.
33
-
2. Device contacts the provisioning service endpoint set at the factory. The device passes the identifying information to the provisioning service to prove its identity.
34
-
3.The provisioning service validates the identity of the device by validating the registration ID and key against the enrollment list entry using either a nonce challenge ([Trusted Platform Module](https://trustedcomputinggroup.org/work-groups/trusted-platform-module/)) or standard X.509 verification (X.509).
35
-
4.The provisioning service registers the device with an IoT hub and populates the device's [desired twin state](../iot-hub/iot-hub-devguide-device-twins.md).
36
-
5. The IoT hub returns device ID information to the provisioning service.
37
-
6.The provisioning service returns the IoT hub connection information to the device. The device can now start sending data directly to the IoT hub.
33
+
2. Device contacts the DPS endpoint set at the factory. The device passes the identifying information to DPS to prove its identity.
34
+
3.DPS validates the identity of the device by validating the registration ID and key against the enrollment list entry using either a nonce challenge ([Trusted Platform Module](https://trustedcomputinggroup.org/work-groups/trusted-platform-module/)) or standard X.509 verification (X.509).
35
+
4.DPS registers the device with an IoT hub and populates the device's [desired twin state](../iot-hub/iot-hub-devguide-device-twins.md).
36
+
5. The IoT hub returns device ID information to DPS.
37
+
6.DPS returns the IoT hub connection information to the device. The device can now start sending data directly to the IoT hub.
38
38
7. The device connects to IoT hub.
39
39
8. The device gets the desired state from its device twin in IoT hub.
40
40
41
41
## Provisioning process
42
-
There are two distinct steps in the deployment process of a device in which the Device Provisioning Service takes a part that can be done independently:
42
+
There are two distinct steps in the deployment process of a device in which DPS takes a part that can be done independently:
43
43
44
44
* The **manufacturing step** in which the device is created and prepared at the factory, and
45
45
* The **cloud setup step** in which the Device Provisioning Service is configured for automated provisioning.
46
46
47
-
Both these steps fit in seamlessly with existing manufacturing and deployment processes. The Device Provisioning Service even simplifies some deployment processes that involve a lot of manual work to get connection information onto the device.
47
+
Both these steps fit in seamlessly with existing manufacturing and deployment processes. DPS even simplifies some deployment processes that involve manual work to get connection information onto the device.
48
48
49
49
### Manufacturing step
50
50
This step is all about what happens on the manufacturing line. The roles involved in this step include silicon designer, silicon manufacturer, integrator and/or the end manufacturer of the device. This step is concerned with creating the hardware itself.
51
51
52
-
The Device Provisioning Service does not introduce a new step in the manufacturing process; rather, it ties into the existing step that installs the initial software and (ideally) the HSM on the device. Instead of creating a device ID in this step, the device is programmed with the provisioning service information, enabling it to call the provisioning service to get its connection info/IoT solution assignment when it is switched on.
52
+
DPS does not introduce a new step in the manufacturing process; rather, it ties into the existing step that installs the initial software and (ideally) the HSM on the device. Instead of creating a device ID in this step, the device is programmed with the provisioning service information, enabling it to call the provisioning service to get its connection info/IoT solution assignment when it is switched on.
53
53
54
54
Also in this step, the manufacturer supplies the device deployer/operator with identifying key information. Supplying that information could be as simple as confirming that all devices have an X.509 certificate generated from a signing certificate provided by the device deployer/operator, or as complicated as extracting the public portion of a TPM endorsement key from each TPM device. These services are offered by many silicon manufacturers today.
55
55
@@ -66,39 +66,39 @@ After the service has been configured for automatic provisioning, it must be pre
66
66
1. The first part is establishing the initial connection between the device and the IoT solution by registering the device.
67
67
2. The second part is applying the proper configuration to the device based on the specific requirements of the solution it was registered to.
68
68
69
-
Once both of those two steps have been completed, we can say that the device has been fully provisioned. Some cloud services only provide the first step of the provisioning process, registering devices to the IoT solution endpoint, but do not provide the initial configuration. The Device Provisioning Service automates both steps to provide a seamless provisioning experience for the device.
69
+
Once both of those two steps have been completed, we can say that the device has been fully provisioned. Some cloud services only provide the first step of the provisioning process, registering devices to the IoT solution endpoint, but do not provide the initial configuration. DPS automates both steps to provide a seamless provisioning experience for the device.
70
70
71
71
## Features of the Device Provisioning Service
72
-
The Device Provisioning Service has many features, making it ideal for provisioning devices.
72
+
DPS has many features, making it ideal for provisioning devices.
73
73
74
74
***Secure attestation** support for both X.509 and TPM-based identities.
75
75
***Enrollment list** containing the complete record of devices/groups of devices that may at some point register. The enrollment list contains information about the desired configuration of the device once it registers, and it can be updated at any time.
76
-
***Multiple allocation policies** to control how the Device Provisioning Service assigns devices to IoT hubs in support of your scenarios: Lowest latency, evenly weighted distribution (default), and static configuration via the enrollment list. Note that latency is determined using the same method as [Traffic Manager](https://docs.microsoft.com/azure/traffic-manager/traffic-manager-routing-methods#performance).
76
+
***Multiple allocation policies** to control how DPS assigns devices to IoT hubs in support of your scenarios: Lowest latency, evenly weighted distribution (default), and static configuration via the enrollment list. Latency is determined using the same method as [Traffic Manager](https://docs.microsoft.com/azure/traffic-manager/traffic-manager-routing-methods#performance).
77
77
***Monitoring and diagnostics logging** to make sure everything is working properly.
78
-
***Multi-hub support** allows the Device Provisioning Service to late-bind devices to an IoT hub at runtime. The Device Provisioning Service can talk to hubs across multiple Azure subscriptions.
79
-
***Cross-region support** allows the Device Provisioning Service to assign devices to IoT hubs in other regions.
78
+
***Multi-hub support** allows DPS to late-bind devices to an IoT hub at runtime. DPS can talk to hubs across multiple Azure subscriptions.
79
+
***Cross-region support** allows DPS to assign devices to IoT hubs in other regions.
80
80
81
81
You can learn more about the concepts and features involved in device provisioning in [device concepts](concepts-device.md), [service concepts](concepts-service.md), and [security concepts](concepts-security.md).
82
82
83
83
## Cross-platform support
84
-
The Device Provisioning Service, like all Azure IoT services, works cross-platform with a variety of operating systems. Azure offers open-source SDKs in a variety of [languages](https://github.com/Azure/azure-iot-sdks) to facilitate connecting devices and managing the service. The Device Provisioning Service supports the following protocols for connecting devices:
84
+
Just like all Azure IoT services, DPS works cross-platform with a variety of operating systems. Azure offers open-source SDKs in a variety of [languages](https://github.com/Azure/azure-iot-sdks) to facilitate connecting devices and managing the service. DPS supports the following protocols for connecting devices:
85
85
86
86
* HTTPS
87
87
* AMQP
88
88
* AMQP over web sockets
89
89
* MQTT
90
90
* MQTT over web sockets
91
91
92
-
The Device Provisioning Service only supports HTTPS connections for service operations.
92
+
DPS only supports HTTPS connections for service operations.
93
93
94
94
## Regions
95
-
The Device Provisioning Service is available in many regions. The updated list of existing and newly announced regions for all services is at [Azure Regions](https://azure.microsoft.com/regions/). You can check availability of the Device Provisioning Service on the [Azure Status](https://azure.microsoft.com/status/) page.
95
+
DPS is available in many regions. The updated list of existing and newly announced regions for all services is at [Azure Regions](https://azure.microsoft.com/regions/). You can check availability of the Device Provisioning Service on the [Azure Status](https://azure.microsoft.com/status/) page.
96
96
97
97
> [!NOTE]
98
-
> The Device Provisioning Service is global and not bound to a location. However, you must specify a region in which the metadata associated with your Device Provisioning Service profile will reside.
98
+
> DPS is global and not bound to a location. However, you must specify a region in which the metadata associated with your DPS profile will reside.
99
99
100
100
## Availability
101
-
There is a 99.9% Service Level Agreement for the Device Provisioning Service, and you can [read the SLA](https://azure.microsoft.com/support/legal/sla/iot-hub/). The full [Azure SLA](https://azure.microsoft.com/support/legal/sla/) explains the guaranteed availability of Azure as a whole.
101
+
There is a 99.9% Service Level Agreement for DPS, and you can [read the SLA](https://azure.microsoft.com/support/legal/sla/iot-hub/). The full [Azure SLA](https://azure.microsoft.com/support/legal/sla/) explains the guaranteed availability of Azure as a whole.
102
102
103
103
## Quotas
104
104
Each Azure subscription has default quota limits in place that could impact the scope of your IoT solution. The current limit on a per-subscription basis is 10 Device Provisioning Services per subscription.
@@ -109,7 +109,7 @@ For more details on quota limits:
109
109
*[Azure Subscription Service Limits](../azure-resource-manager/management/azure-subscription-service-limits.md)
110
110
111
111
## Related Azure components
112
-
The Device Provisioning Service automates device provisioning with Azure IoT Hub. Learn more about [IoT Hub](https://docs.microsoft.com/azure/iot-hub/).
112
+
DPS automates device provisioning with Azure IoT Hub. Learn more about [IoT Hub](https://docs.microsoft.com/azure/iot-hub/).
113
113
114
114
## Next steps
115
115
You now have an overview of provisioning IoT devices in Azure. The next step is to try out an end-to-end IoT scenario.
0 commit comments