secure-device-onboard / client-sdk

Client-sdk is a portable device implementation of the Secure Device Onboarding (SDO) protocol

Secure Device Onboard (SDO) Client SDK

Note: The support for this product has been discontinued from March 31, 2023. FIDO Device Onboard (FDO) is functionally compatible with Secure Device Onboard (SDO). We recommend users to switch to FDO components (https://github.com/secure-device-onboard/client-sdk-fidoiot).

Introduction
SDO Compilation Setup

• Safestring
  
• Service Info Modules
• Manufacturer Network Address
• ECDSA Private Key Generation
• HTTP_PROXY

Linux* TPM* Reference Implementation
Linux* Reference Implementation
Arm* Mbed* OS Reference Implementation
Arm* Mbed* Linux* Reference Implementation
Security Implications

client-sdk's Issues

TPM2_TSS_ENGINE version and link broken

utils/install_tpm_libs.sh fails because

TPM2_TSS_ENGINE_VER=1.1.0-rc0
TPM2_TSS_ENGINE_LINK="https://github.com/tpm2-software/tpm2-tss-engine/archive/v$TPM2_TSS_ENGINE_VER.zip"

TPM2_TSS_ENGINE version / source archive is no longer existing.

Invalid certificate chain error during TO0

Getting the following invalid certificate chain error during TO0:

16-06-2021 11:47:56.973 INFO [pool-1-thread-4] o.s.i.t.t.To0ScheduledClientSession.call - To0 session failed for https://sdo-dev.trustedservices.intel.com:443
16-06-2021 11:47:56.974 ERROR [pool-1-thread-4] o.s.i.t.t.To0ScheduledClientSession.call - (POST https://sdo-dev.trustedservices.intel.com:443/mp/113/msg/22) 400 {"ec":2,"emsg":255,"em":"Certificate chain is invalid."}
16-06-2021 11:47:56.976 INFO [pool-1-thread-4] o.s.i.t.t.To0SchedulerEventsImpl.onFailure - TO0 failed for the device having uuid 5dd750d5-9604-442e-b9e6-dd009074c877