AZ-220 · Question #73
You have an Azure IoT hub that uses a Device Provision Service instance. You plan to deploy 100 IoT devices. You need to confirm the identity of the devices by using the Device Provision Service…
The correct answer is A. X.509 certificates B. Trusted Platform Module (TPM) 2.0 D. Symmetric key. The Device Provisioning Service supports the following forms of attestation: Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token. This does not require a physical TPM on the…
Question
Options
- AX.509 certificates
- BTrusted Platform Module (TPM) 2.0
- CTrusted Platform Module (TPM) 1.2
- DSymmetric key
- EDevice Identity Composition Engine (DICE)
- F509 certificates based on the standard X.509 certificate authentication flow.
How the community answered
(31 responses)- A74% (23)
- C16% (5)
- E3% (1)
- F6% (2)
Explanation
The Device Provisioning Service supports the following forms of attestation: Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token. This does not require a physical TPM on the device, but the service expects to attest using the endorsement key per the TPM Symmetric Key based on shared access signature (SAS) Security tokens, which include a hashed signature and an embedded expiration. https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#attestation-mechanism
Topics
Community Discussion
No community discussion yet for this question.