aws-iot-zero-touch-secure-provisioning-kit | Project files for the AWS IoT Zero Touch Secure | Identity Management library

This section serves as a quick reference for the setup required. The full user manual referenced above will give more detailed instructions.
Clone or Download the AWS IOT Zero-Touch Secure Provisioning kit software. Note- CryptoAuthLib is a submodule and is not automatically included and will need to be cloned recursively or downloaded separately from the kit software. If downloaded separately, the files will need to be placed in firmware\SAMG55\AWS_IoT_Zero_Touch_SAMG55\src\cryptoauthlib folder. Install AWS CLI. Used to configure AWS credentials for the python scripts. Install serial terminal emulator, like PuTTY. Used to view status/debug information from the SAMG55. Install Python 3. Make sure to include pip and tcl/tk. PC side work is all done from python scripts. Install Python packages (pip install –r requirements.txt) required for the kit python scripts. Maybe install Visual C++ 2017 Build Tools. Microsoft Visual C++ Build Tools 14.0 may be required for the hidapi python package. This is a big download/install and it is not needed if the previous step completed without error.
Clone or Download the AWS IOT Zero-Touch Secure Provisioning kit software. Note- CryptoAuthLib is a submodule and is not automatically included and will need to be cloned recursively or downloaded separately from the kit software. If downloaded separately, the files will need to be placed in firmware\SAMG55\AWS_IoT_Zero_Touch_SAMG55\src\cryptoauthlib folder
Install AWS CLI. Used to configure AWS credentials for the python scripts.
Install serial terminal emulator, like PuTTY. Used to view status/debug information from the SAMG55.
Install Python 3. Make sure to include pip and tcl/tk. PC side work is all done from python scripts.
Install Python packages (pip install –r requirements.txt) required for the kit python scripts.
Maybe install Visual C++ 2017 Build Tools. Microsoft Visual C++ Build Tools 14.0 may be required for the hidapi python package. This is a big download/install and it is not needed if the previous step completed without error.
See AWS CloudFormation templates and documentation in the cloud-formation-templates folder.
Log into the AWS Console for your account and select the region you want to run the kit from.
Create an IAM user to demo/run the kit from: User name: ZTUser Enable Programmatic access and AWS Management Console access Add AWS managed policies AWSIoTFullAccess and AWSLambdaFullAccess Run aws configure from the command line on your PC to configure the AWS credentials for the ZTUser account. Make sure the enter the same region as selected in the previous step.
Create JITR Lambda Function Policy Name: ZTLambdaJITRPolicy Policy Document: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "iot:UpdateCertificate", "iot:CreatePolicy", "iot:AttachPrincipalPolicy", "iot:CreateThing", "iot:CreateThingType", "iot:DescribeCertificate", "iot:DescribeCaCertificate", "iot:DescribeThing", "iot:DescribeThingType", "iot:GetPolicy" ], "Resource": "*" } ] }
Create JITR Lambda Function Role Role type: AWS Service Role > AWS Lambda Name: ZTLambdaJITRRole Add policies AWSLambdaBasicExecutionRole, AWSXrayWriteOnlyAccess, and ZTLambdaJITRPolicy.
Once AWS has been configured successfully, Run aws configure from the command line. (part of the AWS CLI download)
Enter the AWS Access Key ID from AWS and press enter.
Enter the Secret Access Key from AWS and press enter.
Ensure that the defualt region name matches the AWS account.
Press enter for the Default output format[None]: prompt.
The central hub of the kit is the SAMG55 Xplained Pro board.
Plug WINC1500 Xplained Pro into EXT1 on the SAMG55 Xplained Pro.
Plug OLED1 Xplained Pro into EXT3 on the SAMG55 Xplained Pro.
Plug CryptoAuth Xplained Pro into EXT4 on the SAMG55 Xplained Pro. Please note, depending on when you purchased your kit, your kit may have come with CryptoAuth Xplained Pro Rev A boards or Rev B boards. Rev B boards have an ATECC608A device attached and do not come pre-configured. Extra steps need to be followed to initialize the ATECC CryptoAuthentication device on the board. Begin the initialization process by running the firmware without the WINC1500 Xplained Pro board attached. The firmware will automatically guide you through this process with instructions from EDBG serial port output messages.
Plug USB cable from PC into Target USB port on the SAMG55 Xplained Pro. Once the firmware is loaded, the board communicates with the scripts on the PC via this port as an HID device.
Plug USB cable from PC into EDBG USB port on the SAMG55 Xplained Pro. This port is how the firmware is loaded/updated and also exposes a serial port (COM port) that outputs debug/status information (115200 baud).
While the revision B kit comes with the appropriate firmware loaded, the original (rev A) kit will need firmware updates to work. Additionally, new firmware updates may be released.
Update the WINC1500 firmware to 19.5.2. Use Atmel Studio to find create a new ASF Example Project for the WINC1500 Firmware Update Project (v19.5.2) - SAMG55 Xplained Pro. Run the samg55_xplained_pro_firmware_update.bat batch script from the src folder to update.
Update the SAMG55 firmware to the latest version in the firmware folder of this package.
Once the firmware has been successfully downloaded open a serial terminal and press the reset button on the SAMG55. There should be instructions on how to proceed.