This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 11%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
Will Azure IoT Central ever support TPM attestation with the internal DPS service?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 74%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
@Andrew Batta Welcome to Microsoft Q&A forum!
Will Azure IoT Central ever support TPM attestation with the internal DPS service?
Could you please elaborate your query with more details?
When a device first tries to connect to your IoT Central application, it starts the process by connecting to the Device Provisioning Service (DPS).
If you have not checked already, take a look at these documentations for more details.
Regarding Azure IoT Hub Device Provisioning Service (DPS) and support for TPM, See Create a TPM individual enrollment and Create a device enrollment entry
Hi @AshokPeddakotla-MSFT , according to the documentation for IoT Central the only authentication types are x509 and SAS. Also, it doesn’t look like I can get to the underlying provisioning service that’s managed by IoT Central so there’s no way for me to do the TPM enrollment.
@Andrew Batta Wanted to follow up with you to understand whether the below information helped. Please let us know if there are any other queries.
If below suggestions answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further queries do let us know.
Helllo @Andrew Batta ,
the IoT Central documentation supports individual enrollments using TPM.
The underlying DPS service only supports TPM for individual enrollments:
In this blog post, I elaborate a bit more on TPM usage, including links to source code for generating the endorsement key.
Hi @Sander van de Velde | MVP , thanks for the information. In my IoT Central app I don't see those options on the "Device connections group" page.
Ok I found the page you referenced. I didn't know I had to create a device first, then connect it. Are there APIs available to create the enrollment through code, similar to the Provisioning Service Client that requires the connection string to the DPS?
Helllo @Andrew Batta ,,
yes, the REST API supports the creation of an attestation based on TPM.
I'm not sure if there is an SDK that can offer the same functionality.
The endorsement key needs to be generated on the device based on eg. the registration name of the device.
See this GitHub repo as an example.
----------
If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.