MQTT client ‘RefusedNotAuthorized’ when connecting to edge translation gateway.

Hi

I am trying to connect a downstream MQTT device to a translation edge gateway. I understand from learn.microsoft.com/en-us/azure/iot-central/core/how-to-connect-iot-edge-transparent-gateway#provision-a-downstream-device that “IoT Central relies on the Device Provisioning Service (DPS) to provision devices in IoT Central. Currently, IoT Edge can’t use DPS provision a downstream device to your IoT Central application.” It then goes on to provision the thermostat device manually using ProvisioningDeviceClient anyway.

  1. How is this implementation differ from an enrolment group?
  2. How do I achieve this using x.509 certificates.

With all the provisioning samples I have used when I try run mosquitto for instance I get ‘RefusedNotAuthorized’ and a edgeHub error of

‘DEVICEID authentication failure

<3> 2024-10-14 13:42:05.261 +00:00 [ERR] [Microsoft.Azure.Devices.Edge.Hub.Mqtt.DeviceIdentityProvider] – Unable to generate identity for clientId DEVICEID and username GATEWAYHOSTNAME/DEVICEID/?api-version=2020-09-30

<6> 2024-10-14 13:42:05.261 +00:00 [INF] [EdgeHub] – “ClientNotAuthenticated, Client ID: DEVICEID; Username: GATEWAYHOSTNAME/DEVICEID/?api-version=2020-09-30‘

Regards,

Gareth

Read more here: Source link