How to support certificate based authentication in Device Update Agent

[yogeshamrutkar]

As per current du.config.json file we have option to provide connection string only, there is no option for certificate.
If we want to use certificate for authentication purpose, then how we can do that, Please guide me.

[jw-msft]

If not using nested edge, see https://learn.microsoft.com/en-us/azure/iot-hub-device-update/device-update-agent-provisioning#on-iot-linux-devices-without-iot-edge-installed

In du-config.json, you'll need to set "connectionType": "AIS"
see https://learn.microsoft.com/en-us/azure/iot-hub-device-update/device-update-configuration-file#list-of-fields for more details of the du-config properties.

DU agent currently uses Azure IoT Identity Service (AIS) rather than using DPS directly.
See https://azure.github.io/iot-identity-service/configuration.html for how to configure /etc/aziot/config.toml

See https://learn.microsoft.com/en-us/azure/iot-dps/concepts-x509-attestation to learn more about x509 certificate attestation.