10
votes
Testing the success of Over the Air updates
I have software (Windows Server - a little different to 'things' but the principal is the same) that calls in every 24 hours - it sends back various meta data about itself :
customer name (or unique ...
- 201
8
votes
Accepted
How can I use 2FA in an MQTT network?
You need a broker proxy, or a webserver...
First of all, you absolutely need a authentication service somewhere connected to your broker to perform the 2FA using specific topics (/auth/RFID,...). It ...
- 3,656
7
votes
How can I use 2FA in an MQTT network?
The upcoming MQTT v5 specification adds support for the AUTH control packet, which allows challenge/response authentication. As MQTT v5 isn't yet finalised support may still change, but it seems ...
- 830
6
votes
Accepted
AWS IoT Authentication - Using own certificate not working
Keep in mind, that when connecting the first time and trying to register a certificate with JIT you have to provide not only the device certificate but also the CA certificate you used to sign your ...
5
votes
Testing the success of Over the Air updates
You could, for example, make a request every X weeks/days/hours... to a server with the current version number of the software. You will after be able to use analytics to see the current percentage ...
- 800
5
votes
How can I use 2FA in an MQTT network?
As per the specification, the connect message may optionally provide user name and a password. This is validated against a ACL saved somewhere on the broker. So, that is your first factor of ...
- 1,051
4
votes
How can I use 2FA in an MQTT network?
To achieve 2FA in MQTT network I have created following services for authentication which are connected to Broker.
ID verifier
Token Generator
Token Verifier
When MQTT client connects to broker over ...
- 357
4
votes
Testing the success of Over the Air updates
It's all about a smart synchronization policy
You need a smart synchronization policy that works in tandem with your roll-out approach of your update. The most obvious point in time where the IoT ...
- 8,095
3
votes
Multiple agents authentication to MQTT
Never let "anyone" add stuff via MQTT to a database ;) Once bad data gets into the database, any results from your analysis programs will be skewed at best, or down right wrong at worse. Any time ...
- 608
3
votes
Multiple agents authentication to MQTT
There should be no need to use Authentication via HTTP first for MQTT devices. MQTT supports Authentication which can be linked to ACLs to control what topics a given user/device can publish/subscribe ...
- 12k
3
votes
How to secure root on IoT device while remaining open to tinkerers
Assuming you need to handle firmware updates (otherwise, you're insecure by default) then you will also need to sign the updates (and manage updates in a secure way). Otherwise, an attacker can simply ...
- 10.3k
3
votes
Accepted
How to secure root on IoT device while remaining open to tinkerers
Great question! Several things you should keep in mind.
1. Default passwords
This is really basic, and you've probably already thought of it, but let me reiterate: default or easy passwords are ...
- 4,612
3
votes
Accepted
mosquitto - allow_anonymous false shows connected message
allow_anonymous false needs to be in the mosquitto.conf file not the acl file
IIRC the logging is delayed because of a minor bug in some versions of mosquitto because you are not driving any other ...
- 12k
3
votes
Accepted
Connecting a SIM800L to a IBM BlueMix Server via MQTT
I've found this library useful to solve issues with authentication. If you encountered same issues on GSM modules with Arduino, it may help you as well:
https://github.com/elementzonline/SIM800_MQTT
- 181
2
votes
AWS IoT Authentication - Using own certificate not working
I ran into a similar problem with a different solution
If you create a certificate using a default openssl.cnf, or some other mechanism that generates an SSL certificate such as PHP's ...
- 121
2
votes
Multiple agents authentication to MQTT
If you do not want to bother with broker yourself and embed any authentication scheme inside it I have solution for you (non commercial, e.g. it is free):
Per each instance of your small IoT platform ...
- 766
1
vote
Is there a simple database app builder that allows for single row access based on token in the row?
I know very little about thingsboard, but I would have assumed that if you add an enrichment node to add whatever device attributes you need, you can then use that in a transformation node, to run any ...
- 908
1
vote
How to authenticate a device in the IoT platform?
There is a simple way to prevent your users using your REST API from outside their RPI. It would work in the following way:
You protect the file system of the RPI by a root password that is not ...
- 767
1
vote
Accepted
How enrollment list in Azure IoT Hub Device Provisioning Service isolate tenant specific configuration?
The answer is more or less same if you have seen this question Should there be one device provisioning service for one IoT hub if it is associated with one tenant?
Yes DPS isolates tenant ...
- 161
Only top scored, non community-wiki answers of a minimum length are eligible