Hello, I am new to Azure Sphere and I am following the instructions in this official Microsoft link: https://learn.microsoft.com/de-de/azure-sphere/install/overview?view=azure-sphere-legacy . I have successfully made step 1 Install SDK. Have created/registered a Sphere user Admin account ....@xy.onmicrosoft.com. Next step is to create a tenant. azsphere tenant create --name MSW Where I always get the same error: D:\a_work\1\s\azsphere-cli\build_scripts\windows\artifacts\cli\Lib\site-packages\urllib3/connection.py:463: SubjectAltNameWarning: Certificate for 192.168.35.2 has no subjectAltName , falling back to check for a commonName for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/urllib3/urllib3/issues/497 for details.) command to list certs: azsphere ca-certificate list You don't have access to any Azure Sphere tenants. Type 'azsphere tenant create --name <name>' I am doing the commands in a PowerShell with Admin rights using a Domain Admin account. azsphere login with the created user ....@xy.onmicrosoft.com Azure Sphere Development Kit has IP 192.168.35.2 Any help is much appreciated. THX Markus

Hi, Can you try the following and let me know if this works for you. use the following Azure Sphere CLI commands: azsphere device list-attached This will return the attached Azure Sphere device id (a 128 character string). Then use the tenant name, and device id (the device needs to be unclaimed) to create the tenant. azsphere tenant create --name MSW --device <your_device_id> Please let me know the result! Mike

Thank you @Mike Hall and @Oleg Kharitonov for your assistance on this issue. @Mame Meier I am drafting the response below to capture all the useful information shared above for better readability to the community members. I appreciate it if you can mark the response as Accept Answer and Yes Doing so would help other community members with similar issue identify the solution. I highly appreciate your contribution to the community. Issue Error when trying to create a tenant in Azure Sphere Solution The commands were initially run by an Azure Sphere non-admin user. The tenant appears to be registered to a different user. Try running run azsphere logout from a non-admin command prompt, and then Refresh the Tenants node in Visual Studio. The provides a prompt to log in. Make sure to login with the credentials of the user to tenant is registered with. Please let us know if you have any additional questions or need further assistance on this. Thank you.

Error when trying to create a tenant in Azure Sphere

Accepted answer

Mike Hall 85 Reputation points Microsoft Employee

2024-01-22T13:00:14.88+00:00
Hi, Can you try the following and let me know if this works for you. use the following Azure Sphere CLI commands:

azsphere device list-attached

This will return the attached Azure Sphere device id (a 128 character string). Then use the tenant name, and device id (the device needs to be unclaimed) to create the tenant.

azsphere tenant create --name MSW --device <your_device_id>

Please let me know the result! Mike
Please sign in to rate this answer.
Mame Meier 70 Reputation points

2024-01-22T14:05:37.6866667+00:00

Hi Mike unfortunately I do get the same error: D:\a_work\1\s\azsphere-cli\build_scripts\windows\artifacts\cli\Lib\site-packages\urllib3/connection.py:463: SubjectAltNameWarning: Certificate for 192.168.35.2 has no subjectAltName, falling back to check for a commonName for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/urllib3/urllib3/issues/497 for details.) This error appears 4 times. And output after these lines:

1 device attached: --> Device ID: Cannot get device ID --> Is responsive: no --> IP address: 192.168.35.2 --> Connection path: 213

I can ping IP 192.168.35.2. I am using MS Edge as browser Do I need to forward any Ports on my FW? Does the error point to any drive on my PC, such as D:? What I checked and I do not have any folder like \a on my D:\ drive THX Markus

Mike Hall 85 Reputation points Microsoft Employee

2024-01-22T14:53:40.6733333+00:00

Hi, Can I ask you to restart the Windows 'Azure Sphere Device Communication Service', and then try the 'azsphere device list-attached' command again ? Press Start and enter Services. Right-click the Azure Sphere Device Communication Service and select Restart. Let me know if you are able to get the device id. which version of the Azure Sphere SDK do you have installed ? (azsphere show-version)

Mike Hall 85 Reputation points Microsoft Employee

2024-01-22T16:03:23.9133333+00:00

can you also run this command:

azsphere device show-os-version

this will show the os version of the connected device, which might need updating.

Mame Meier 70 Reputation points

2024-01-22T16:39:14.98+00:00

after a restart of the mentioned service I do get the exact same error command azsphere device show-os-version end up with this error: again the 4 lines with D:......error HTTPSConnectionPool(host='192.168.35.2', port=443): Max retries exceeded with url: /status (Caused by SSLError(CertificateError("hostname '*.devices.sphere.azure.local' doesn't match '192.168.35.2'"))) hope it does not matter that my PC is a domain joined machine?

Mike Hall 85 Reputation points Microsoft Employee

2024-01-22T17:36:16.2333333+00:00

being domain joined should not cause any issues. Can you recover the device to the latest OS, use the following command.

azsphere device recover

once the device is recovered, then use the 'azsphere device list-attached' command.

Mike Hall 85 Reputation points Microsoft Employee

2024-01-23T10:17:26.9866667+00:00

Can you post the SDK version you have installed, you can either run:

azsphere show-version

or, you can open the VERSION file (text file) in:

C:\Program Files (x86)\Microsoft Azure Sphere SDK

If the Major/Minor version numbers are not '23.05', then please update the SDK by downloading/installing from: https://aka.ms/AzureSphereSDKDownload/Windows

Mame Meier 70 Reputation points

2024-01-23T14:02:13.1933333+00:00

perfect...last command made it. THX Right now I am at the step with Visual Studio where I can see the device but the tenant is not showing up neither I can see the step to login. I am using same account for Azure Sphere ans Visual Studio. VS 2022.jpg

Mike Hall 85 Reputation points Microsoft Employee

2024-01-23T15:28:10.9066667+00:00

Thanks for the update, it looks like you are logged in using the 'Azure Sphere Explorer' since the tenant list (lower half of the display) shows '0 tenants' - this would show 'login' if you were not logged in. From the command line/powershell, can you run the following commands...

azsphere tenant list

This will show the list of tenants associated with your logged in account. If this list is empty, then do the following...

azsphere tenant create --name MSW azsphere tenant list azsphere device claim

The last two commands will create the tenant, and then claim the device into the tenant. Can you provide the SDK version you are using

azsphere show-version

and also provide the outcome of listing the tenants (first step above), and the outcome of creating the tenant, listing the tenants, and claiming the device. thanks! Mike

Mame Meier 70 Reputation points

2024-01-23T15:55:47.5966667+00:00

I did the create tenant and claim command before and did it right now again. see outcome in screenshot...PS.jpg

Mike Hall 85 Reputation points Microsoft Employee

2024-01-23T16:13:41.9133333+00:00

If you now close and re-open Visual Studio 2022, does the tenant now show up ?

Mame Meier 70 Reputation points

2024-01-23T16:38:04.0633333+00:00

re-open Visual Studio did not help. But I have tried to start Visual Studio as an Admin and this made the tenant show up. Do I really need to start Visual Studio as Admin? I mean I am fine with this..but wonder why. Or would I need to create the user in Azure Sphere which I am starting Visual Studio?

Oleg Kharitonov 30 Reputation points Microsoft Employee

2024-01-23T18:24:37.84+00:00

Can you please run this diagnostic:

Set the Windows environment variable "AzureSphere.PrintCliCommands" to 1

Re-open Visual Studio non-admin

Open the "Azure Sphere" output pane (see screenshot)

Share the output of the "azsphere tenant list" command

Thank you!

Mame Meier 70 Reputation points

2024-01-25T15:46:52.3166667+00:00

sorry...but how I set the "AzureSphere.PrintCliCommands" to 1 :-(

Oleg Kharitonov 30 Reputation points Microsoft Employee

2024-01-25T19:03:33.71+00:00

To set a Windows environment variable, hit the Start button and type "Environment". You will see an option similar to:

Then select "Environment Variables..." on the bottom, and add it here:

Visual Studio will need to be re-launched for the Environment Variable to take effect.

Mame Meier 70 Reputation points

2024-01-26T08:00:51.2866667+00:00

THX and output is: where user "m...msw..@outlook.com" is registered in Azure Sphere as well. The user account I am logged in at my PC is different then this one. And the user that shows up in the Visual Studio account is the admin@..onmicrosoft.com . All of them are registered @ Azure Sphere

> azsphere show-version -o json { "Azure Sphere SDK": "23.05.5.58345" } > azsphere show-version -o json { "Azure Sphere SDK": "23.05.5.58345" } > azsphere show-user -o json { "name": "m...msw..@outlook.com" } > azsphere device list-attached -o json [ { "deviceConnectionPath": "213", "deviceIdentifier": "f611d3...c47a62", "ipAddress": "192.168.35.2", "isResponsive": true } ] > azsphere device wifi show-status -d 192.168.35.2 -o json { "SSID": "MSW.. WiFi", "configurationState": "enabled", "connectionState": "connected", "frequency": 5200, "ipAddress": "192.168.150.116", "keyManagement": "WPA2-PSK", "macAddress": "2c:..:d2", "mode": "station", "securityState": "psk", "wpaState": "COMPLETED" } > azsphere tenant list --config-overwrite client-sdk=vs -o json [] > azsphere device show-os-version -d 192.168.35.2 -o json { "osversion": "23.05" } > azsphere device app show-status -d 192.168.35.2 -o json [ { "componentId": "cc00b24...6ec80", "imageId": "ddd403....d72", "state": "running" } ] > azsphere show-user -o json { "name": "m...msw..@outlook.com" } > azsphere tenant list --config-overwrite client-sdk=vs -o json []

Oleg Kharitonov 30 Reputation points Microsoft Employee

2024-01-26T18:33:10.89+00:00

I believe that the selected user is "m*@outlook.com" when you're running Azure Sphere as non-admin, either from the command line or inside Visual Studio. Also, your tenant appears to be registered to the created user "....@xy.onmicrosoft.com". Can you run "azsphere logout" from a non-admin command prompt, and then Refresh the Tenants node in Visual Studio? You should see a prompt to log in. If you use the "....@xy.onmicrosoft.com" account, you should see your tenant in the list.

Mame Meier 70 Reputation points

2024-01-27T19:43:13.54+00:00

first time logout and a new start of Visual Studio as a non admin did not help. But as I did not give up on this suggestion I have tried it a second time where I could login to my tenant as a non admin account. So all my challenges are solved and I am so happy of the ongoing support I did face in this forum. THX

Oleg Kharitonov 30 Reputation points Microsoft Employee

2024-01-28T20:06:55.3433333+00:00

I am very happy to hear that your problem is now solved! Don't hesitate to contact us again if you have any additional questions.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Error when trying to create a tenant in Azure Sphere

1 additional answer

Your answer