Skip to main content Link Menu Expand (external link) Document Search Copy Copied
Open Horizon

FDO agent installation and registration

FIDO Device Onboard (FDO) , created by Intel, makes it easy to add edge devices built with Intel FDO (FIDO Device Onboard) to an Open Horizon instance by simply importing their associated ownership vouchers and then powering on the devices.

FDO overview

The software in the FDO git repository provides integration between FDO and Open Horizon, making it easy to use FDO-enabled edge devices with Horizon. The Horizon FDO support consists of these components:

  • A docker image of of the FDO Owner service (those that run on the Open Horizon management hub).
  • An hzn fdo voucher sub-command to import one or more ownership vouchers into Owner service. (An ownership voucher is a file that the device manufacturer gives to the purchaser (owner) along with the physical device.)
  • A sample script called start-mfg.sh to start the development manufacturing service so that the ownership voucher can be extended to the user to enable them to run through the FDO-enabling steps on a Virtual Machine (VM) device that a device manufacturer would run on a physical device. This allows you to try out the FDO process with your Horizon instance before purchasing FDO-enabled devices.
  • A REST API that authenticates users through the Horizon Exchange and enables importing and querying ownership vouchers.

Note: FDO only supports edge devices, not edge clusters.

Before you begin

FDO requires that the agent files are stored in the Open Horizon Cloud Sync Service (CSS). If this has not been done, ask your administrator to run one of the following commands as described in Gather edge node files:

edgeNodeFiles.sh ALL -c ...

Trying FDO

Before you purchase FDO-enabled edge devices, you can test FDO support in Open Horizon with a VM that simulates an FDO-enabled device:

  1. You need an API key. See Creating your API key for instructions to create an API key, if you do not already have one.

  2. Contact your Open Horizon administrator to get the values of these environment variables. (You need them in the next step.)

    export HZN_ORG_ID=<exchange-org>
export HZN_EXCHANGE_USER_AUTH=iamapikey:<api-key>
export HZN_FDO_SVC_URL=https://<mgmt-hub-ingress>/edge-fdo-ocs/api
export HZN_MGMT_HUB_CERT_PATH=<path-to-mgmt-hub-self-signed-cert>
export CURL_CA_BUNDLE=$HZN_MGMT_HUB_CERT_PATH

  3. Follow the steps in the FIDO Device Onboard (FDO) to observe FDO automatically install the Open Horizon agent on a device and registers it with your Open Horizon management hub.

Adding FDO-enabled devices to your Open Horizon domain

If you have purchased FDO-enabled devices and want to incorporate them into your Open Horizon domain:

  1. If you did not create FDO owner key pairs when trying out FDO in the previous section, perform these steps:

    1. You need an API key. See Prepare for setting up edge nodes for instructions to create an API key, if you do not already have one.

    2. Contact your Open Horizon administrator to get the values of these environment variables. (You need them in the next step.)

      export HZN_ORG_ID=<exchange-org>
export HZN_EXCHANGE_USER_AUTH=iamapikey:<api-key>
export HZN_FDO_SVC_URL=https://<mgmt-hub-ingress>/edge-fdo-ocs/api
export HZN_MGMT_HUB_CERT_PATH=<path-to-mgmt-hub-self-signed-cert>
export CURL_CA_BUNDLE=$HZN_MGMT_HUB_CERT_PATH

    3. To download the public key for FDO, use the device alias you received from the manufacturer device initialization. Then, use that device alias to download the corresponding public key. For more information, see Generate Owner Key Pairs .

  2. Log in to the Open Horizon management console.

  3. On the Nodes tab, click Add node.

  4. Fill in the necessary information to import the ownership vouchers you received when you purchased the devices.

  5. Connect the devices to the network and power them on.

  6. Back in the management console, watch the progress of the devices as they come online by viewing the Node overview page and filtering on the installation name.