10 votes

Testing the success of Over the Air updates

I have software (Windows Server - a little different to 'things' but the principal is the same) that calls in every 24 hours - it sends back various meta data about itself : customer name (or unique ...
user avatar
8 votes
Accepted

How can I use 2FA in an MQTT network?

You need a broker proxy, or a webserver... First of all, you absolutely need a authentication service somewhere connected to your broker to perform the 2FA using specific topics (/auth/RFID,...). It ...
user avatar
  • 3,656
7 votes

How can I use 2FA in an MQTT network?

The upcoming MQTT v5 specification adds support for the AUTH control packet, which allows challenge/response authentication. As MQTT v5 isn't yet finalised support may still change, but it seems ...
user avatar
  • 830
6 votes
Accepted

AWS IoT Authentication - Using own certificate not working

Keep in mind, that when connecting the first time and trying to register a certificate with JIT you have to provide not only the device certificate but also the CA certificate you used to sign your ...
user avatar
5 votes

Testing the success of Over the Air updates

You could, for example, make a request every X weeks/days/hours... to a server with the current version number of the software. You will after be able to use analytics to see the current percentage ...
user avatar
  • 800
5 votes

How can I use 2FA in an MQTT network?

As per the specification, the connect message may optionally provide user name and a password. This is validated against a ACL saved somewhere on the broker. So, that is your first factor of ...
user avatar
4 votes

How can I use 2FA in an MQTT network?

To achieve 2FA in MQTT network I have created following services for authentication which are connected to Broker. ID verifier Token Generator Token Verifier When MQTT client connects to broker over ...
user avatar
  • 357
4 votes

Testing the success of Over the Air updates

It's all about a smart synchronization policy You need a smart synchronization policy that works in tandem with your roll-out approach of your update. The most obvious point in time where the IoT ...
user avatar
  • 8,095
3 votes

Multiple agents authentication to MQTT

Never let "anyone" add stuff via MQTT to a database ;) Once bad data gets into the database, any results from your analysis programs will be skewed at best, or down right wrong at worse. Any time ...
user avatar
  • 608
3 votes

Multiple agents authentication to MQTT

There should be no need to use Authentication via HTTP first for MQTT devices. MQTT supports Authentication which can be linked to ACLs to control what topics a given user/device can publish/subscribe ...
user avatar
  • 12k
3 votes

How to secure root on IoT device while remaining open to tinkerers

Assuming you need to handle firmware updates (otherwise, you're insecure by default) then you will also need to sign the updates (and manage updates in a secure way). Otherwise, an attacker can simply ...
user avatar
3 votes
Accepted

How to secure root on IoT device while remaining open to tinkerers

Great question! Several things you should keep in mind. 1. Default passwords This is really basic, and you've probably already thought of it, but let me reiterate: default or easy passwords are ...
user avatar
  • 4,612
3 votes
Accepted

mosquitto - allow_anonymous false shows connected message

allow_anonymous false needs to be in the mosquitto.conf file not the acl file IIRC the logging is delayed because of a minor bug in some versions of mosquitto because you are not driving any other ...
user avatar
  • 12k
3 votes
Accepted

Connecting a SIM800L to a IBM BlueMix Server via MQTT

I've found this library useful to solve issues with authentication. If you encountered same issues on GSM modules with Arduino, it may help you as well: https://github.com/elementzonline/SIM800_MQTT
user avatar
2 votes

AWS IoT Authentication - Using own certificate not working

I ran into a similar problem with a different solution If you create a certificate using a default openssl.cnf, or some other mechanism that generates an SSL certificate such as PHP's ...
user avatar
  • 121
2 votes

Multiple agents authentication to MQTT

If you do not want to bother with broker yourself and embed any authentication scheme inside it I have solution for you (non commercial, e.g. it is free): Per each instance of your small IoT platform ...
user avatar
  • 766
1 vote

Is there a simple database app builder that allows for single row access based on token in the row?

I know very little about thingsboard, but I would have assumed that if you add an enrichment node to add whatever device attributes you need, you can then use that in a transformation node, to run any ...
user avatar
1 vote

How to authenticate a device in the IoT platform?

There is a simple way to prevent your users using your REST API from outside their RPI. It would work in the following way: You protect the file system of the RPI by a root password that is not ...
user avatar
1 vote
Accepted

How enrollment list in Azure IoT Hub Device Provisioning Service isolate tenant specific configuration?

The answer is more or less same if you have seen this question Should there be one device provisioning service for one IoT hub if it is associated with one tenant? Yes DPS isolates tenant ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible