Quickstart: Enroll TPM device to IoT Hub Device Provisioning Service using Java Service SDK

  • Article

In this quickstart, you programmatically create an individual enrollment for a simulated TPM device in the Azure IoT Hub Device Provisioning Service using the Java Service SDK with the help of a sample Java application.

Prerequisites

Prepare the development environment

  1. Make sure you have Java SE Development Kit 8 installed on your machine.

  2. Set up environment variables for your Java installation. The PATH variable should include the full path to jdk1.8.x\bin directory. If this is your machine's first Java installation, then create a new environment variable named JAVA_HOME and point it to the full path to the jdk1.8.x directory. On Windows machine, this directory is found in the C:\Program Files\Java\ folder, and you can create or edit environment variables by searching for Edit the system environment variables on the Control panel of your Windows machine.

    You may check if Java is successfully set up on your machine by running the following command on your command window:

    java -version

  3. Download and extract Maven 3 on your machine.

  4. Edit environment variable PATH to point to the apache-maven-3.x.x\bin folder inside the folder where Maven is extracted. You may confirm that Maven is successfully installed by running this command on your command window:

    mvn --version

  5. Make sure git is installed on your machine and is added to the environment variable PATH.

Download and modify the Java sample code

This section shows how to add the provisioning details of your TPM device to the sample code.

  1. Open a command prompt. Clone the GitHub repo for device enrollment code sample using the Java Service SDK:

    git clone https://github.com/Azure/azure-iot-sdk-java.git --recursive

  2. In the downloaded source code, navigate to the sample folder azure-iot-sdk-java/provisioning/provisioning-samples/service-enrollment-sample. Open the file /src/main/java/samples/com/microsoft/azure/sdk/iot/ServiceEnrollmentSample.java in an editor of your choice, and add the following details:

    1. Add the [Provisioning Connection String] for your provisioning service, from the portal as following:

      1. Navigate to your provisioning service in the Azure portal.

      2. Open the Shared access policies, and select a policy that has the EnrollmentWrite permission.

      3. Copy the Primary key connection string.

        Get the provisioning connection string from portal

      4. In the sample code file ServiceEnrollmentSample.java, replace the [Provisioning Connection String] with the Primary key connection string.

        private static final String PROVISIONING_CONNECTION_STRING = "[Provisioning Connection String]";

    2. Add the TPM device details:

      1. Get the Registration ID and the TPM endorsement key for a TPM device simulation, by following the steps leading to the section Simulate TPM device.

      2. Use the Registration ID and the Endorsement Key from the output of the preceding step, to replace the [RegistrationId] and [TPM Endorsement Key] in the sample code file ServiceEnrollmentSample.java:

        private static final String REGISTRATION_ID = "[RegistrationId]";
private static final String TPM_ENDORSEMENT_KEY = "[TPM Endorsement Key]";

    3. Optionally, you may configure your provisioning service through the sample code:

      • To add this configuration to the sample, follow these steps:

        1. Navigate to the IoT hub linked to your provisioning service in the Azure portal. Open the Overview tab for the hub, and copy the Hostname. Assign this Hostname to the IOTHUB_HOST_NAME parameter. 
          private static final String IOTHUB_HOST_NAME = "[Host name].azure-devices.cn";
        2. Assign a friendly name to the DEVICE_ID parameter, and keep the PROVISIONING_STATUS as the default ENABLED value.

      • OR, if you choose not to configure your provisioning service, make sure to comment out or delete the following statements in the ServiceEnrollmentSample.java file:

        // The following parameters are optional. Remove it if you don't need.
individualEnrollment.setDeviceId(DEVICE_ID);
individualEnrollment.setIotHubHostName(IOTHUB_HOST_NAME);
individualEnrollment.setProvisioningStatus(PROVISIONING_STATUS);

    4. Study the sample code. It creates, updates, queries, and deletes an individual TPM device enrollment. To verify successful enrollment in portal, temporarily comment out the following lines of code at the end of the ServiceEnrollmentSample.java file:

      // *********************************** Delete info of individualEnrollment ************************************
System.out.println("\nDelete the individualEnrollment...");
provisioningServiceClient.deleteIndividualEnrollment(REGISTRATION_ID);

    5. Save the file ServiceEnrollmentSample.java.

Build and run the Java sample code

  1. Open a command window, and navigate to the folder azure-iot-sdk-java/provisioning/provisioning-samples/service-enrollment-sample.

  2. Build the sample code by using this command:

    mvn install -DskipTests

    This command downloads the Maven package com.microsoft.azure.sdk.iot.provisioning.service to your machine. This package includes the binaries for the Java Service SDK, that the sample code needs to build.

  3. Run the sample by using these commands at the command window:

    cd target
java -jar ./service-enrollment-sample-{version}-with-deps.jar

  4. Observe the output window for successful enrollment.

  5. Navigate to your provisioning service in the Azure portal. Select Manage enrollments, and select the Individual Enrollments tab. Notice that the Registration ID of your simulated TPM device is now listed.

    Verify successful TPM enrollment in portal

Clean up resources

If you plan to explore the Java service sample, do not clean up the resources created in this quickstart. If you do not plan to continue, use the following steps to delete all resources created by this quickstart.

  1. Close the Java sample output window on your machine.
  2. Close the TPM simulator window that you may have created to simulate your TPM device.
  3. Navigate to your Device Provisioning service in the Azure portal, select Manage enrollments, and then select the Individual Enrollments tab. Select the check box next to the Registration ID for the enrollment entry you created using this quickstart, and press the Delete button at the top of the pane.

Next steps

In this quickstart, you enrolled a simulated TPM device to your Device Provisioning service. To learn about device provisioning in depth, continue to the tutorial for the Device Provisioning Service setup in the Azure portal.

Azure IoT Hub Device Provisioning Service tutorials