Generating Certificates

See step-by-step instructions for generating certificates to be used for certificate based authentication here.

Create a new 'Application Registration'

• On the Microsoft Entra ID Overview page, navigate to the 'App Registrations' page and create a new Application Registration 
  
• Add the device certificate and CertDevice.pem, generated above, to the new Application Registration under ‘Certificates & secrets’
  

Add the new ‘Application Registration’ as an EventHub Data Owner

• Navigate to the desired EventHub and in Access Control (IAM), add the new application registration as a Data Owner.
  

Add device certificates to Azure Injector Event Hub configuration

• Navigate to the Azure Injector > Settings > Azure Event Hubs Hubs > Certificates and add the certificates as shown below:

  Friendly Name	Certificate Filename	File Description	File Location
  CACertificate
  DeviceCertificate	CertDevice.pem	Device Certificate	iotcerts/certs/device/CertDevice.pem
  DeviceKey	CertDevice.key	Device Private Key	iotcerts/certs/device/CertDevice.key

  
  

• Update the Azure Injector > Settings > Azure Event Hubs > Settings configuration to use the certificates as shown below. Note : the certificates created do not use a Password

Verify the connection is established as shown by the Status on the Azure Injector > Settings > Azure Event Hubs view