Skip to content
Profiles Service

Provision Devices

Device identity is a critical component that ensures the security of connected devices. Every device in the Trimble ecosystem must be registered with Profiles and must be identified with a unique ID. When you register a device with Profiles, a system-generated identification deviceProfileId in UUID format is created for the device that is globally unique and non-editable. You can also define meta data for the device such as hardware thumbprint, serial number, manufacturer information, and other attributes.

Device Profile Certificate Options

The device profile allows user to create their identities with these options:

  • Create a device identity using Cloud Core CA certificate.
  • Create a device identity using BYO (Bring your own) certificate. For more information, see Bring your own certificate.
  • Create a device profile without certificates.

For more information, see Add certificate to a device.

Using Cloud Core Certificate

Request Schema (Application/JSON)

{
"certCommonName": "string",
"caCertOrigin": "string",
"publicCertPem": "string",
"csr": "string",
"privateKeyFormat": "string"
}

Bring Your Own Certificate

With the bring your own (BYO) certificate option, you can use your own certificate authority to create a client certificate to register a device in Profiles.

These are the commands to generate a BYO certificate:

  1. Generate CA key

    openssl ecparam -genkey -out CA.key -name prime256v1

  2. Generate CA pem

    openssl req -new -key CA.key -x509 -nodes -days 365 -out CA.pem -subj “/O=IoT CN=CA1"

  3. Generate device key

    openssl genrsa -out Device.key 2048

  4. Generate device CSR

    openssl req -new -key Device.key -out Device.csr -subj "/O=IoT CN=CA1Device1"

    DeviceName in CN field is mandatory.

  5. Generate device certificate

    openssl x509 -req -in Device.csr -CA CA.pem -CAkey CA.key -CAcreateserial -out Device.pem -days 3650 -sha256

  6. View certificate details

    openssl x509 -in Device.pem -noout -text

  7. Register

Finally, raise a request with Trimble Cloud Support to register a pem with the same CN name defined during the certificate generation.

For more information on adding certificates, see API Reference.