Azure IoT topics

Can Admins Access IoT Edge Container Code Despite ACR Encryption?

m7mdrevest — Thu, 06 Nov 2025 07:45:20 GMT

If I deploy my Python application as an IoT Edge container, and the container is pulled from Azure Container Registry (which says all images are encrypted at rest), can someone with administrator access on the machine access the container and see my code?

Module identity fetch issue

vishnupriyaiot — Fri, 19 Sep 2025 01:08:09 GMT

I have registered an edge device[gateway] to Azure IoTHub using x509 self signed certificate. The device got registered fine and modules [edgeAgent,edgeHub] got deployed along with some custom edge modules- with deployment status 200, device and modules status reporting. The modules are running on the edge device but the modules keep restarting as they couldnt authenticate.

edge Device registration is through x509 self signed certificate, with below properties in config.toml

# Manual provisioning with x.509 certificates [provisioning] source = "manual" iothub_hostname = "REQUIRED_IOTHUB_HOSTNAME" device_id = "REQUIRED_DEVICE_ID_PROVISIONED_IN_IOTHUB" [provisioning.authentication] method = "x509" identity_cert = "REQUIRED_URI_OR_POINTER_TO_DEVICE_IDENTITY_CERTIFICATE" identity_pk = "REQUIRED_URI_TO_DEVICE_IDENTITY_PRIVATE_KEY"

Logs from edgeHub:

[INF] - Unable to authenticate client <deviceid>/<custom_edge_module> with cached service identity <deviceid>/<custom_edge_module> (Found: False). Resyncing service identity... <4> 2025-09-19 00:29:56.415 +00:00 [WRN] - Error while refreshing the service identity: <deviceid>/<custom_edge_module> OnBehalfOf: <deviceid> System.Collections.Generic.KeyNotFoundException: The given key '<deviceid>/<custom_edge_module>' was not present in the dictionary. at Microsoft.Azure.Devices.Edge.Hub.Core.DeviceScopeIdentitiesCache.RefreshServiceIdentityInternal(String refreshTarget, String onBehalfOfDevice, Boolean invokeServiceIdentitiesUpdated) in /mnt/vss/_work/1/s/edge-hub/core/src/Microsoft.Azure.Devices.Edge.Hub.Core/DeviceScopeIdentitiesCache.cs:line 187

device twin status:

"deviceScope": "ms-azure-iot-edge://<devicescope>", "modelId": "", "status": "enabled", "statusUpdateTime": "0001-01-01T00:00:00.0000000Z", "lastActivityTime": "2025-09-19T00:47:10.0840495Z", "connectionState": "Connected", "cloudToDeviceMessageCount": 0, "authenticationType": "selfSigned", "x509Thumbprint": { "PrimaryThumbprint": "<thumbprint>" }

Module identity twin of edgeHub:

"modelId": "", "status": "enabled", "statusUpdateTime": "0001-01-01T00:00:00.0000000Z", "lastActivityTime": "2025-09-19T00:42:23.4967322Z", "connectionState": "Connected", "cloudToDeviceMessageCount": 0, "authenticationType": "sas", "x509Thumbprint": {}

module identity twin of edgeAgent and other modules:

"modelId": "", "status": "enabled", "statusUpdateTime": "0001-01-01T00:00:00.0000000Z", "lastActivityTime": "2025-09-19T00:54:15.6085296Z", "connectionState": "Disconnected", "cloudToDeviceMessageCount": 0, "authenticationType": "sas", "x509Thumbprint": {}

The modules couldnt communicate to hub as they couldnt authenticate, where as the same modules works fine when the edge device is registered via shared access signature and send telemetry to iot hub.

Please let me know where could the issue be for modules not able to communicate with iotHub

All Azure IoT Central Applications completly broken

Andirly — Thu, 31 Jul 2025 07:49:19 GMT

Dear community,

I have big trouble regarding all Azure IoT Applications, which haven't been properly rendering since a couple of hours.

Every link is broken and no data is shown as seen the screenshot below.

We already tested

different browser
different tentants
different computers

No difference. Can anyone point out the reason for that or experiences similar issues right now?

Best,

Andy

.

MarcJames123 — Tue, 24 Feb 2026 18:54:58 GMT

Sensor to AZURE IoT Hub to ADLS to Power BI

BamBam405 — Mon, 14 Jul 2025 22:35:30 GMT

Discovery & Resolution ?

By creating this workflow, I found the following:

Device sensor firmware published data once every 30 seconds.
AZURE IoT Hub routed this data to ADL BLOB as JSON once every 2 minutes.
Power BI Power Query failed to interpret JSON files. "extra characters at end of JSON input".

The PBI PQ error occurred because each BLOB file contained four individual JSON expressions - one for each device sensor publication. This can be resolved by reformatting each JSON file as a single document by bracketing all four expressions as one […] and adding a comma to the end of the first three. It works, but it's sloppy. I did it manually.

A simpler resolution is to synchronize timing of device sensor publications with IoT Hub routing to ADL BLOB so that each file contains only a single JSON expression. In other words, by publishing and routing to ADL at the same frequency - only one publication / JSON expression is contained per file. This avoids the PBI PQ failure, but I have doubts about its scalability.

Do any of you have a better suggestion?

Is it possible to configure the IoT Hub to wrap multiple JSON expressions as a single JSON document for routing to ADLS?

Edge Module Authentication

Nevasleepz — Mon, 30 Jun 2025 07:15:54 GMT

Hi Folks,
I've made my first IoT Edge Module (container), its just based off:

FROM ubuntu:oracular

For now, but it seems to start up and run correctly. I've pushed the container into ACR and added it to my manifest which pushed it down to my edge gateway and its up and running. So far so good.

Now, I want my application in that container to publish events to the edgeHub, and subscribe to properties set in IoT Central. I followed some of the guides, but have had no luck. Firstly - not much love for a rust application, but aside from that, I've resorted to jumping into the container and trying to use the mosquitto clients likes so:

$ docker exec -ti <module_id> bash
# mosquitto_sub -d \
-V mqttv311 \
-h edgeHub \
-p 8883 \
-i "${IOTEDGE_DEVICEID}/${IOTEDGE_MODULEID}" \
-u "${IOTEDGE_IOTHUBHOSTNAME}/${IOTEDGE_DEVICEID}/${IOTEDGE_MODULEID}/?api-version=2018-06-30" \
-P "${SAS_TOKEN}" \
-t "devices/${IOTEDGE_DEVICEID}/modules/${IOTEDGE_MODULEID}/messages/events" \
--cafile /etc/ssl/certs/IoTHubRootCA.pem \
-q 1
Client <device_id>/<module_id> sending CONNECT
OpenSSL Error[0]: error:0A000086:SSL routines::certificate verify failed
Error: Protocol error

I just cant get it to validate the certs in the edgeHub.

If I look at the edgeHub container it shows:

$ docker logs -f edgeHub

<4> 2025-06-30 06:52:23.276 +00:00 [WRN] - "TLS handshake failed., System.AggregateException: One or more errors occurred. (Authentication failed, see inner exception.)\n ---> System.Security.Authentication.AuthenticationException: Authentication failed, see inner exception.\n ---> Interop+OpenSsl+SslException: SSL Handshake failed with OpenSSL error - SSL_ERROR_SSL.\n ---> Interop+Crypto+OpenSslCryptographicException: error:0A000418:SSL routines::tlsv1 alert unknown ca\n --- End of inner exception stack trace ---\n at Interop.OpenSsl.DoSslHandshake(SafeSslHandle context, ReadOnlySpan`1 input, Byte[]& sendBuf, Int32& sendCount)\n at System.Net.Security.SslStreamPal.HandshakeInternal(SafeDeleteSslContext& context, ReadOnlySpan`1 inputBuffer, Byte[]& outputBuffer, SslAuthenticationOptions sslAuthenticationOptions)\n --- End of inner exception stack trace ---\n at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken cancellationToken)\n --- End of inner exception stack trace ---, 0af563ac"

That error suggests the edgeHub does not like the CA in my module ?
I'm looking for any references to get the right CA's setup so that my translation app can publish events to the edgeHub container.

Need help with updating disconnected devices

magsman — Thu, 27 Mar 2025 09:17:56 GMT

hey, I am new to azure and IOT and I need help with knowing how to do this. The scenario is that: I have a set of Linux devices that can't be connected to the internet ever, these devices should be connected to another device (will have internet) which will act as parent to all these disconnected devices. The challenge is to update these child devices using Azure IOT, the updates will be deployed in the hub, and it has to passed to child devices via parent device and automatically needs to be installed in the child devices. The parent might not require this update or might. How will I do this? also I can't use any scripting mechanisms.

Now when I surfed a bit through azure documentation, I found out that I can use device update for this, What I found was:
1) setup every device in IOT hub

2)set the device with internet as parent and others a child

3)set up MCC module in parent

4)Connect the devices physically (Lan or Wi-Fi)

5)Roll out updates

Now I don't know whether this is true or not, it's just my understanding. I am having few doubts:

1)do we also add the child devices (disconnected devices in IOT hub), if yes what if we have 1000 devices? (I'm asking about scalability)

2)How do I actually physically connect the parent and child devices, do I just plug in Lan/Wi-Fi, or do I have to do anything else?

3)How to add MCC Module?

4)how does this actually works? is it feasible?

Designing and developing for Unified Namespaces

MrJungle — Tue, 25 Feb 2025 13:52:28 GMT

I apologize if I am posting in the incorrect community. I would like to know if anyone has developed a Unified Namespace architecture and solution within Azure for IIOT without using third-party middleware such as ignition, high-byte, or HiveMQ. I am currently looking to use Azure IOT and ADF and Dynamics 365 as the ERP and MES.

IOT Central data export destination on waiting

GianpaoloF72 — Mon, 17 Feb 2025 16:12:06 GMT

Hello.

I have successfully created a demo sensor in iot central and now I would like to connect it to my service bus queue. I went to data export tab and create a new destination using the connection strings of my queue, it seemed ok but the destination is on "waiting" state since 10 hours.

Is it normal? Can I check anything?

Thanks

Gianpaolo

Enable ipv6 for azure-iot-edge user-defined network

kuph — Mon, 03 Feb 2025 10:23:41 GMT

We have a Raspberry Pi that we use as an edge device. One of our modules needs to communicate over IPv6 in the local network. Since the module is automatically connected to the "azure-iot-edge" network in Docker, I'd like a method to easily enable IPv6 on this network.

To achieve this, I tried following the steps described in the IPv6Configuration documentation. For me, this worked only for the default bridge network but not for the "azure-iot-edge" network. I also checked the networking documentation and attempted to configure the network using the mentioned /etc/aziot/edged/config.yaml file. However, this file did not exist initially, and when I manually added it, it seemed to be completely ignored.

The only way I have been able to get IPv6 to work for the "azure-iot-edge" network so far is by completely removing it and manually recreating it with IPv6 enabled. This also required me to manually disconnect and later reconnect all modules. This does not feel like the correct way to achieve this. I would assume there should be a way to configure this either from the module definition in the IoT Hub or by adding some configuration on the device.

Internet speed

Larshaaa — Thu, 05 Dec 2024 13:11:39 GMT

So i have 250/100 internet but for some reason i get 250mb download but my upload does not go over 10mbs. But when on wireless it gives 250/100

anyone have any ideas or fixes to run?

yes i have tried with different cables and devices where the internet is fine

can't use create_from_edge_environment with proxy options - client doesn't connect to azure iot hub

teodoramihuc — Tue, 22 Oct 2024 13:49:26 GMT

Hello,

I am trying to configure a client connection towards azure iot hub from a module. I've tried creating the client with create_from_edge_environment method and I get the following error:

Traceback (most recent call last): File "/usr/local/lib/python3.10/site-packages/azure/iot/device/common/mqtt_transport.py", line 391, in connect rc = self._mqtt_client.connect( File "/usr/local/lib/python3.10/site-packages/paho/mqtt/client.py", line 914, in connect return self.reconnect() File "/usr/local/lib/python3.10/site-packages/paho/mqtt/client.py", line 1044, in reconnect sock = self._create_socket_connection() File "/usr/local/lib/python3.10/site-packages/paho/mqtt/client.py", line 3683, in _create_socket_connection return socks.create_connection(addr, timeout=self._connect_timeout, source_address=source, **proxy) File "/usr/local/lib/python3.10/site-packages/socks.py", line 209, in create_connection raise err File "/usr/local/lib/python3.10/site-packages/socks.py", line 199, in create_connection sock.connect((remote_host, remote_port)) File "/usr/local/lib/python3.10/site-packages/socks.py", line 47, in wrapper return function(*args, **kwargs) File "/usr/local/lib/python3.10/site-packages/socks.py", line 814, in connect raise GeneralProxyError("Socket error", error) socks.GeneralProxyError: Socket error: 407: Proxy Authentication Required

This problem doesn't appear if I create the client using create_from_connection_string method. This adds complexity to my script and I would like to use create_from_edge_environment method.

Does anybody have any insights on why one method works and the other doesn't?

Thanks!

unable to deploy modules other than edgeAgen & edgeHub to my device

mistyron — Thu, 10 Oct 2024 23:46:35 GMT

Hi,
I have my device hooked up to IoT Edge account and have two modules built and pushed to my ACR account.

I've added them the modules to my device under IoT Edge Modules. I configured ther ACR name, address, username & password and there's no apparent error visible.

The DESIRED STATUS for both modules is set to running.

under Settings, i can see that the Image URI & the Module name has been set as well, yet my device does not receive the modules. When I execute "iotedge list", I only see the edgeAgent & the edgeHub modules. What might I be missing, I'm wondering?

Thanks for any help in this matter!

Problems with Edge Computing and Microsoft Azure IoT Edge. Any Advice?

stevanjohn011 — Tue, 06 Aug 2024 06:55:27 GMT

Hi everyone,

I'm currently experiencing some challenges with my edge computing setup and a Microsoft product. As someone relatively new to managing both hardware and software in this capacity, I could really use some advice from those more experienced.

Here are the specifics of my setup:

Edge Computing Setup: High-end CPUs, ample RAM, and SSD storage capacity.
Microsoft Product: Microsoft Azure IoT Edge

The Issues:

Performance Challenges: The Microsoft Azure IoT Edge is not performing as expected with my edge computing setup, especially during high-traffic periods and intensive computational tasks. There are noticeable slowdowns and performance bottlenecks.
Installation and Configuration Difficulties: During the setup of the Microsoft Azure IoT Edge with my edge computing infrastructure, I encountered several hurdles. While I managed to complete the installation, I suspect there may be lingering configuration issues affecting performance and usability.
Integration and Compatibility Concerns: I'm facing compatibility issues with certain applications and third-party tools within the Microsoft Azure IoT Edge. These issues are disrupting workflows and reducing efficiency in system management.

Steps Taken So Far:

I've ensured that my hardware setup meets or exceeds the recommended specifications for the Microsoft Azure IoT Edge.
I've followed the installation and setup documentation for the Microsoft Azure IoT Edge meticulously.
I've reviewed and adjusted system configurations and resource allocations to optimize performance.

Despite my efforts, the challenges persist. Have any of you encountered similar issues with Microsoft products in edge computing environments? Are there specific configurations, optimizations, or troubleshooting techniques you've found effective? Any advice, insights, or recommended resources would be greatly appreciated.

Thank you in advance for your help!

IOT device event twin change detect

Bhavin163884 — Tue, 23 Jul 2024 12:21:30 GMT

What are the ways to catch IOT device event twin change in azure? I want to send notification or execute something like function app, when device twin event occur and reported property get change. I am using .net 8 and azure.

let me know all possible ways.

Thanks,
Bhavin Bhesaniya.

Detect IOT device twin report property and execute notification

Bhavin163884 — Fri, 19 Jul 2024 08:46:53 GMT

Hello Community,

I am seeking for the help to achieve one functionality for my IOT device. I have crated one Azure IOT device under azure IOT hub.

Now on the device twin whenever my device report property get change( any property), It should send some event notification to the end user.
What is the best way to achieve this? I want to use Azure event grid but the template is not available in message routing you can see below.

If i use Event Hub then there is a risk to increase latency.

let me know if there is any other way to get this with lowest latency.

Thanks,

Bhavin Bhesaniya.

Connecting PLC to Azure IoT Hub

PeterDaniels — Mon, 01 Jul 2024 16:30:08 GMT

We have a client with an Automation Direct Productivity 3000 PLC. Looks like it has an MQTT client configuration that may allow us to connect directly to Azure IoT Hub, but we are struggling. We're waiting for the client to get a vendor resource to assist. Meanwhile. we're trying to figure out if that will work directly, or if we need something like IoT Edge to act as a protocol translator. Unsure if the device is able to utilize TLS 1.2 or not. The config screen looks like this (please ignore current settings):

Do we need to use something like IoT Edge to convert the MQTT to use TLS? Any other advice for getting this up and running?

Thank you,

-Peter

How would Azure create IoT systems for FM with focus on sustainability?

Justinerialto — Wed, 19 Jun 2024 16:23:33 GMT

How would Azure develop IT solutions for FM that are transparent on their impact on sustainability? How could we demonstrate to clients the efficiency savings and sustainability impact?

Azure Streaming Analytics Job not writing data to Azure storage container

PFlorenzano442 — Fri, 07 Jun 2024 16:18:51 GMT

Hello,

I have a situation where my Azure Streaming Analytics job is not writing the incoming events coming from our IoT Hub to the Azure storage container.

Within my dashboard, The IoT Hub Usage states there are several thousand messages coming through daily.

Below were the steps taken to start troubleshooting my problem:

Tested both the input and output connections from the query and they were both successful
Uploaded test data and the file format has not changed
Checked for errors within the input/IoT Hub for malformed and/or deserialization errors but there are none

Any help with this problem would be greatly appreciated.

Thank you

Azure IOT Hub, plotting raw date (not average)

davidrast — Mon, 03 Jun 2024 18:49:16 GMT

Hello

I'm using Azure IOT Hub and would like to visualize actual sensor data. However, using the preset template for the visualisation, I can't select raw data but only mean values over a minimum timespan of 30min.