Signing certificates are not accepted for individual enrollment

Arun75 21

I am trying to X509 certificate based individual enrollment from java service sdk.

I am getting below error while doing the operation

com.microsoft.azure.sdk.iot.provisioning.service.exceptions.ProvisioningServiceClientBadFormatException: Bad message format! {"errorCode":400004,"trackingId":"c68fc932-7654-4aeb-983c-a5b066d","message":"Signing certificates are not accepted for individual enrollment.","timest
ampUtc":"2020-08-21T16:42:08.6715715Z"}

Reference link: https://video2.skills-academy.com/en-us/azure/iot-dps/quick-enroll-device-x509-java#javasample

QuantumCache 20,266 Reputation points

2020-08-21T17:15:58.053+00:00

Hello @ArunPratapSingh-9076, Thanks for reaching out to us!
Please confirm that you have started the tutorial as Group Enrollment and then modified the existing code to work for Individual Enrollment, right?

Or please let us know the exact steps you have followed on this topic, to better understand the scenario.
Arun75 21 Reputation points

2020-08-24T04:42:32.97+00:00

yes i started the group enrollment it is working but when i modified for individual X509 enrollment . i was getting the error "Signing certificates are not accepted for individual enrollment"

Exact step : azure-iot-sdk-java/provisioning/provisioning-samples/service-enrollment-sample . modified the code as documented in https://video2.skills-academy.com/en-us/azure/iot-dps/quick-enroll-device-x509-java#Modifications to enroll a single X.509 device
QuantumCache 20,266 Reputation points

2020-08-25T23:52:30.063+00:00

Hello @ArunPratapSingh-9076, We are verifying the document, please stay tuned.
Arun75 21 Reputation points

2020-08-26T06:14:45.207+00:00

Hi Satish

Can you please help me to fix this issue related to Individual Enrollment that i am facing.. I fallow the exact steps mentioned in Modification to enroll s single X509 device.
QuantumCache 20,266 Reputation points

2020-08-26T06:16:34.477+00:00

Hello @Arun75 , We are verifying the document, please stay tuned.
QuantumCache 20,266 Reputation points

2020-08-31T05:56:39.797+00:00

Hello @ArunPratapSingh-9076, Please accept the below helpful responses as 'Answer', which will be helpful to others as well with similar question, so that we can close this thread.

Accepted answer

QuantumCache 20,266 Reputation points

2020-08-26T22:02:20.793+00:00

Hello @Arun75

Thanks for reaching out to us!. Sorry for the delay in response, as the whole document needed to be verified. Both scenarios Group and Individual.

We are able to successfully provision/run the Java sample Code in this scenario. Not able to repro the issue reported by you.

Here are the validation steps which gives an overview:

After the Group enrollment using x509-success, we worked on Individual device enrollment which worked as well.

Below is the summary snaps of Modifications to enroll a single X.509 device

Code changes: ServiceEnrollmentSample.java

Changes made to the Main method and removed the unwanted variables as per instructions.

Comment out the last lines, so that the Enrollments are not deleted.

Finally, Build and run the project.

Troubleshooting suggestions on your issue:

Please verify if you are using the right certificate for this scenario as per the instructions?

Please confirm if the .java file is well-edited as per all instructions? Please rebuild and run the project for every small modification as well.

Please let us know if you need further help in this matter.
Please sign in to rate this answer.

1 person found this answer helpful.
QuantumCache 20,266 Reputation points

2020-08-31T16:15:03.457+00:00

Hello @ArunPratapSingh-9076, Just checking in if you have had a chance to see the previous response.
Please accept the below helpful responses as 'Answer', which will be helpful to others as well with similar question, so that we can close this thread.

Arun75 21 Reputation points

2020-09-08T17:08:54.377+00:00

Hi Satish, Thanks for response . above example is working on one system but not working on another.

can you please give some input on root cause of the error ("com.microsoft.azure.sdk.iot.provisioning.service.exceptions.ProvisioningServiceClientBadFormatException: Bad message format! {"errorCode":400004,"trackingId":"c68fc932-7654-4aeb-983c-a5b066d","message":"Signing certificates are not accepted for individual enrollment.","timest
ampUtc":"2020-08-21T16:42:08.6715715Z").

QuantumCache 20,266 Reputation points

2020-09-08T17:58:38.457+00:00

Related MSDN : https://social.msdn.microsoft.com/Forums/en-US/fa526ddd-e71c-4f39-9cce-193f51830f33/signing-certificates-are-not-accepted-for-individual-enrollment?forum=winserver2008appcompatabilityandcertification

QuantumCache 20,266 Reputation points

2020-09-08T18:04:12.557+00:00

Hello @Arun75 Thanks for reaching out to us.

Is there any major difference between the two systems?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Signing certificates are not accepted for individual enrollment

0 additional answers

Your answer