Azure IoT Edge
An Azure service that is used to deploy cloud workloads to run on internet of things (IoT) edge devices via standard containers.
IoT Edge modules don't currently support certificate-based authentication.
Azure IoT Module Client X509 authentication
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 80%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJK%3C/text%3E%3C/svg%3E)
Jeffrey K
171
Reputation points
I want to create ModuleClient using the X509Cert authentication but I do not see any class for it similar to the one we have for Device auth (DeviceAuthenticationWithX509Certificate).
I have a custom module which would create ModuleClient for edgeAgent to get the moduleTwin and need X509Cert auth for creating module client.
Azure IoT Edge
1 answer
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2021-07-01T23:09:38.8+00:00 -
Jeffrey K 171 Reputation points
2021-07-02T10:53:09.617+00:00 What are the alternate recommendation for moduleclient authentication to be considered for edge device in prod? I see we have an option to use connectionstring for auth but then how can that be managed/automated for multiple users? I also see a class for ModuleAuthenticationWithToken with SAS Token auth
-
Anonymous
2021-07-06T03:27:14.617+00:00 IoT Edge manages the SAS tokens used for module auth for you. There is no need to manually manage these module credentials (neither is it can option to do so).
Just use this CreateFromEnvironment API: https://learn.microsoft.com/en-us/java/api/com.microsoft.azure.sdk.iot.device.moduleclient.createfromenvironment?view=azure-java-stable
-
Jeffrey K 171 Reputation points
2021-07-07T13:14:06.627+00:00 CreateFromEnvironment can be used if I'm referring to the current module, but if I want to create a moduleclient for edgeAgent in custom module then I may need connectionstring right?
-
Anonymous
2021-07-07T15:45:21.473+00:00 Sounds like a hack I'd not recommend. But if you do down that route -
a. You can't use x.509 for module auth
b. You'll have manually manage creds for this module.
c. You'll have two module clients using the same identity on the edge device. That will lead to undefined behavior. -
Jeffrey K 171 Reputation points
2021-07-07T16:36:11.06+00:00 yeah, thats true. I'm thinking of polling docker container list using the dockerclient SDK to identify the new modules being installed instead of polling the edgeAgent module twin
Sign in to comment -