View deployment history

The ability to track and reverse deployments is an essential part of the security built into Azure Sphere. The definition of products, images, and device groups makes it possible for the Azure Sphere Security Service to maintain a history of the images that have been added to each device group. The history is available through the Azure Sphere CLI, so by determining the device group to which a particular device belongs and the current images targeted at the device, you can determine exactly which set of software has been historically targeted to the device.

A deployment exists within a device group, which exists within a product, which exists within a tenant. To view a device group's deployment history, you must specify the device group either by device group ID or by name and product, as in the following examples:

azsphere device-group deployment list --device-group <device-group-id>
azsphere device-group deployment list --device-group <product-name/device-group-name>

In Azure Sphere CLI, you can specify a different tenant to override the current tenant:

azsphere device-group deployment list --device-group <device group ID or product-name/device-group-name> --tenant <tenant ID or tenant name>

A deployment exists within a device group, which exists within a product, which exists within a tenant. To view a device group's deployment history:

  1. Open Azure Sphere Explorer.

  2. For the tenant you are interested in, expand the product node to view available products.

  3. Expand the product node you are interested in to view available device groups.

  4. Expand the device group node you are interested in to view information on the device group, which includes a node for the current deployment and another for all deployments.

  5. Expand the Current deployment node to view the date of the current deployment and the deployment ID; expand the Deployed Images node to view the component IDs of the deployed images.

  6. Expand the All deployments node to view the full deployment history, organized by deployment date. Expand the node for a given deployment date to view the deployment ID and the deployed image IDs for that date.

A deployment exists within a device group, which exists within a product, which exists within a tenant. To view a device group's deployment history:

  1. Open Azure Sphere Explorer.

  2. For the tenant you are interested in, expand the product node to view available products.

  3. Expand the product node you are interested in to view available device groups.

  4. Expand the device group node you are interested in to view information on the device group, which includes a node showing the number of deployments for that device group.

  5. Expand this node to view the full deployment history, organized by deployment ID. Expand the node for a given deployment ID to view the deployment date and the deployed image IDs for that deployment ID.