AWS IoT Greengrass Hardware Security Interface (HSI) with ATECC608A Trust Platform

To further help adding hardware secure key storage, Amazon Web Services (AWS) offers IoT Greengrass Hardware Security Integration as part of its IoT Greengrass Core software. It is an interface between AWS IoT Greengrass Core and a hardware secure module based on PKCS#11. The ATECC608A is used in this implementation as the hardware secure key storage to isolate private keys needed for the authentication between AWS IoT and AWS IoT Greengrass from the Linux-based system enabled with AWS IoT Greengrass. This microprocessor-agnostic solution adds true hardware secure key storage to any Linux-based IoT products. The ATEC608a is now listed in the AWS Partner Device Catalog with qualification for AWS IoT Greengrass.

Hardware Setup

Buy the Shield96 Standard

Getting started and Yocto Linux Image

1. Download the image from Shield96 Github repo

   Yocto Linux Image

   Shield96 Warrior v06 Yocto Linux Image comes preconfigured for AWS Greengrass v1.10.0

2. follow the step-by-step instruction here

   Shield96 Getting Started

Getting Started with AWS IoT Greengrass® on ATSAMA5D2 documentation

Download Link Getting Started Guide AWS IoT Greengrass on SAMA5D2

Download Link AWS IoT Greengrass v1.10.0 software

 1. Download AWS IoT Greengrass v1.10.0 software and copy to HD96 board

 2. Here is a change that needs to be made for the "container mode" of AWS IoT Greengrass. 
    Also on the Shield96, change /tmp from a symbolic link to a normal directory using 
    the following commands:

    rm -rf /tmp
    mkdir /tmp
    chmod 1777 /tmp

 3. Add Greengrass User / Group on Shield96  

    adduser -S ggc_user
    addgroup -S ggc_group

 4. When you download your credentials in your AWS account, be sure and change

    "useSystemd" : "yes"
    to: 
    "useSystemd" : "no"
    
    Then you will see happy things from AWS:

Microchip Trust Platform

Using Microchip Trust Platform supported by ARROW Electronics

The Trust Platform from Microchip is composed of a family of pre-provisioned, pre-configured, or fully customizable secure elements. Credentials are generated inside each secure element’s boundary by leveraging our Hardware Secure Modules (HSMs) that are installed in our factories.

The devices also come with hardware and software development tools to make prototyping easy and to fast track your development. Watch this video to learn about the Trust Platform’s three tiers of secure elements—Trust&GO, TrustFLEX and TrustCUSTOM—that can provide you with the options and flexibility you need to meet the requirements of your company’s security model.