liydu / asc-pnp-bugbash

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Azure Security Center for IoT and IoT Plug and Play with Azure RTOS IoT Middleware Bug Bash

Intro

IoT Plug and Play Summer Refresh and Azure Security Center module have been enabled in Azure RTOS IoT Middleware.

Goals for this session:

  1. Build and run multiple components IoT Plug and Play sample application.
  2. Build and test Azure Security Center for IoT integration with Azure RTOS.

Support and feedback

Sample projects

For this bug bash, you can choose to test sample projects in IAR Workbench, semi's IDE projects for actual dev boards or simulated device on PC as zipped files:

  • ST STM32F746G Discovery Kit
  • NXP i.MX RT1060 EVK
  • Microchip SAM E54 Xplained Pro EVK
  • ST STM32L4+ Discovery Kit IoT Node / ST STM32L475 Discovery Kit IoT Node
  • Simulated device on Windows / Linux

Download the .zip file for the specific board and tool (IAR, semi's IDE or PC) you have and choose to test against:

Azure RTOS IoT Middleware bug bash sample projects

NOTE: The Azure Security Center experience is currently enabled on all boards and simulated devices except for the STM32L4+ / STM32L475 board.

Get started

Prepare Azure resources

We recommend to use the IoT Hub and Log Analytics Workspace (azurertos-asc-us-bugbash) that has been created that supports the PnP summer fresh and Azure Security Center for IoT. Please get the IoT Hub connection string that is to be used to configure IoT explorer and your device in the Bug Bash Teams channel.

If you prefer to create your own IoT Hub, here are the instructions to do so:

  • The Azure Security Center for IoT required hub version is only available in the following regions: canary (EastUS2EUAP, CentralUSEUAP) to have Canary enable for the IoT Hub.
  • Create S1 IoTHub in any of these regions to get started.

To create the hub using the az CLI replace the hubname and run the script below:

az extension add --name azure-iot
az login
az account set -s [subscription name]
az iot hub create --resource-group BugBash --sku S1 --location eastus2euap --partition-count 4 --name [iot-hub-name]

To create the hub from the portal make sure you select the right subscription that has Canary region enabled.

And to enable the Log Analytics which Azure Security Center is required:

  1. Go to your IoT Hub and select Settings > Data Collection in Security tab.

Data Collection

  1. In Settings page, enable the Log Analytics and create or choose an existing Log Analytics Workspace that you want the Azure Security Center to use. Make sure Access to raw security data is selected.

Settings

  1. Select Save to enable it.

  2. Now in your Azure resources list, you can see the Log Analytics Workspace enabled for your IoT Hub.

Log Analytics

Device specific guides

Device specific guides is provided as PDF with in the docs folder of the zip file. You can use the same Bug Template to provide the feedback for the documentation.

When you are following the guide, you can skip the most part of the Prepare Azure Resources > Create an IoT Hub section and jump to the last step which is getting the IoT Hub devices host name. Then continue to the Prepare Azure Resources > Register an IoT Hub device section to proceed the reset of the guide.

Reference

Digital Twin Definition Language

The DTDL v2 Spec can be found at https://aka.ms/dtdl can be used as a reference for the language. Use the samples we've provided to get started.

IoT Plug and Play

Azure Security Center for IoT

Azure IoT Middleware for Azure RTOS

About