search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.28k stars 21.45k forks source link

Encryption key questions #6852

Closed smoms closed 6 years ago

smoms commented 6 years ago

when mentioned "encrypted key back to the device" which key is encrypted? what is the encryption key? how does the device use it to connect to IoT Hub (maybe generates a SAS Token)?

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

Mike-Ubezzi-MSFT commented 6 years ago

@smoms Thanks for the feedback! I have assigned the issue to the content author to evaluate and update as appropriate.

nberdy commented 6 years ago

In the case of TPM, the key is encrypted with both the EK and SRK of the TPM. In the case of X.509 (as with the MXChip board in this article), the device connects using the X.509 certificate it possesses and DPS basically tells the device to use the cert it already has to connect to IoT Hub.