Azure IoT Edge: Could not load cert with ID "aziot-edged-trust-bundle"

Taylor 21

I've been trying to get IoT Edge (v1.2.1) which includes installing aziot-identity-service (v1.2.0) up and running on my CentOS 7 installation, but I keep running into this problem.
I have followed all the instructions for installing the MS repo/GPG key, the aziot-identity-service, and the aziot-edge packages as per [how-to-install-iot-edge][1] and grabbing the correct rpm packages from the release page for 1.2.1.

I am attempting to use symmetric key authentication and have tried two different methods for setting up the config.toml file:

Copying /etc/aziot/config.toml.edge.template to /etc/aziot/config.toml, and then configuring only the values for symmetric key authentication using the connection string obtained from the device registered in IoT Hub.
Creating a new file by running 'sudo iotedge config mp -c "

Vasanth Balakrishnan 1 Reputation point

2021-09-15T07:11:23.997+00:00

I'm also running into this exact issue. I've been trying to do a most basic installation of Azure IoT Edge V1.2.3 with symmetric keys, No TPM, No certs. There is not much troubleshooting guide available for this issue.

My environment is Ubuntu server 18.04, aziot-edge V1.2.3, aziot-identity-service V1.2.2
QuantumCache 20,026 Reputation points

2021-09-15T18:44:05.747+00:00

Hello @Vasanth Balakrishnan , below is the resolution posted by @ Taylor-3961 on this thread. Please let me know if you need to check any un-wnated packages on your system causing this issue? please do comment in the below section.

the problem is somehow caused by some other package I have installed on the system. I'm not sure exactly what the package is doing to cause this problem, but having removed that package, I was able to get everything working as expected - I do need that other package so I'll have to figure out what's going on there, but thankfully this is not a problem with the IoT Edge software.
Taylor 21 Reputation points

2021-09-16T14:20:26.063+00:00

Yea, I unfortunately am unsure what package was causing the problem, it was likely one of our own custom packages we had installed on the system, but I don't know which one was the problem one. Moreover, I no longer work for that employer and don't have access to the hardware that was hosting iot edge, so I can't find out any more details about it.
For me, I had looked at file permissions and everything I could find about that topic and made sure everything was the was it was supposed to be, but it still didn't help. I don't know if there was some SELinux policy or something getting in the way, I'm not sure. Wish I could be of more help!

1 answer

QuantumCache 20,026 Reputation points

2021-06-15T20:37:21.62+00:00

Hello @Taylor
In most cases, this is caused by a file permission error. Make sure that the iotedge user has read permissions on the directory and certificates inside.

Could you please point out the documentation(s) you have used or referred to for this scenario?

Resolution posted by @ Tylor

the problem is somehow caused by some other package I have installed on the system. I'm not sure exactly what the package is doing to cause this problem, but having removed that package, I was able to get everything working as expected - I do need that other package so I'll have to figure out what's going on there, but thankfully this is not a problem with the IoT Edge software.
Please sign in to rate this answer.
Taylor 21 Reputation points

2021-06-16T14:05:35.537+00:00

Yea, I've read the same thing about the permissions, which is why I looked into it in the first place.

Honestly, I don't have a great piece of documentation I could refer to here, the documentation is severely lacking with regards to the 1.2 version of IoT Edge. Many things still refer to the previous architecture set up that had different users/groups for the different services. The best I could do was verify that things like /etc/aziot/keyd were owned by the aziotks user, and similarly for the other service folders.

In addition, I'm not using any certificates or anything, at least not explicitly. I've done as basic an install as I possibly could, so if there happens to be any os permissions issues, then I honestly don't know what file/folder it might be looking at. Are there certain folders I should be checking for their permissions?

Mohamed Ali FODHA 0 Reputation points

2023-12-01T18:07:38.3433333+00:00

I have the same issue here:

�× read all preloaded certificates from the Certificates Service - Error could not load cert with ID "aziot-edged-trust-bundle" Caused by: internal error caused by: could not load cert with ID "aziot-edged-trust-bundle" Caused by: What is missing please?
Sign in to comment