aziotctl/aziotctl-common/test-files/apply/dps-x509-pkcs11-est-custom-bootstrap/config.toml (27 lines of code) (raw):
[provisioning]
source = "dps"
global_endpoint = "https://global.azure-devices-provisioning.net/"
id_scope = "0ab1234C5D6"
[provisioning.attestation]
method = "x509"
registration_id = "my-device"
[provisioning.attestation.identity_cert]
method = "est"
common_name = "my-device"
url = "https://example.org/.well-known/custom/est"
bootstrap_identity_cert = "file:///var/secrets/est-custom-bootstrap-id.pem"
bootstrap_identity_pk = "pkcs11:slot-id=0;object=est-custom-bootstrap-id?pin-value=1234"
[aziot_keys]
pkcs11_lib_path = "/usr/lib/libmypkcs11.so"
pkcs11_base_slot = "pkcs11:slot-id=0?pin-value=1234"
[cert_issuance.est]
trusted_certs = [
"file:///var/secrets/est-id-ca.pem",
]
[cert_issuance.est.auth]
username = "estuser"
password = "estpwd"
bootstrap_identity_cert = "file:///var/secrets/est-bootstrap-id.pem"
bootstrap_identity_pk = "pkcs11:slot-id=0;object=est-bootstrap-id?pin-value=1234"
[cert_issuance.est.urls]
default = "https://example.org/.well-known/est"