Skip to main content

Provision a device

Unprovisioned state​

In the unprovisioned state, aos-aimanager (IAM) exposes the port to be used for the provisioning procedure. The device doesn't have credentials to establish secure communication to AosCloud and communication between AosEdge components.

loading...

Provisioning procedure​

aos-prov makes the following steps for the device provisioning procedure:

  • Checks that the device with the given ID was not already provisioned.
  • Generates the device online and an offline certificate/key for secure communication with AosCloud.
  • Registers the device in AosCloud.
  • Generates a certificate/key for AosEdge components (SM, UMs, IAM, CM) to establish two-side TLS communication via gRPC between AosEdge components.

After successful provisioning, IAM doesn't expose the port outside the device. Provisioning diagram

Provisioned state​

See below a diagram representation of the provisioned state.

loading...

The deprovisioning procedure is forbidden at the production step. To unregister the device from AosCloud, the OEM must use AosCloud API and reflash the software on the device.

The software for development contains a deprovisioning script, which can be used for the deprovisioning procedure.