Novus LogBox Wi-Fi Instruction sheet

NOVUS AUTOMATION 1/13
-
LogBox Wi-Fi
AWS VIA MQTT CONFIGURATION MANUAL
Applies to devices with firmware version starting with V1.1x.

NOVUS AUTOMATION 2/13
1. PRESENTATION
Through the MQTT protocol, the LogBox Wi-Fi can be configured to communicate with Amazon Web Services (AWS). To do this,
follow the steps in this manual.

NOVUS AUTOMATION 3/13
2. CONFIGURING AWS
To perform the communication and pairing between the LogBox Wi-Fi and AWS, you need the NXperience software, available
on our website, and optionally the MQTTBox.
After that, the following procedures must be performed:
1. Create an account in Amazon Web Services.
2. Once the account is created, access the Services tab in the top menu and, in the Internet of Things subsection, select the
IoT Core option.
Fig. 01 – AWS Services
3. In the IoT Core service, open the Secure tab in the left menu and select the Policies option. Once the option has been
selected, click on Create a policy.
Fig. 02 – Create a policy

NOVUS AUTOMATION 4/13
4. In the Name field, name the policy to be created. In the Action field, type: "iot:*". Edit the Resource ARN field for "*". Check
the Allow field and click the Create button.
Fig. 03 – New policies configuration
5. After creating a new policy, still in the Secure tab, in the left menu of the IoT Core service, select the Certificatesoption.
Once this option has been selected, click Create a certificate.
Fig. 04 – Create a certificate
6. Click Create certificate in the One-click certificate creation tab.
Fig. 05 – One-click certificate creation

NOVUS AUTOMATION 5/13
7. Download the A certificate for this thing and the Private Key.
Fig. 06 – Downloads
8. Download the certificate from a root CA.
Fig. 07 – root CA
9. In this new window, click the Amazon Root CA 1 link to download AWS Root CA certificate.
Fig. 08– Root CA 1
10. When you click on the Amazon Root CA1 link, the certificate will be displayed on the webpage in text format. To save it, just
click on Ctrl + S.
For the TLS v1.2 security layer, you must have the 3 certificates, similar to the ones below:
Fig. 09 – Examples
11. Before completing the procedure, click Attach a policy and append the policy created in Step 4.
Fig. 10 – Attach a policy
Fig. 11 – Select a policy

NOVUS AUTOMATION 6/13
12. Check the created certificate, access the list of Actions and click Activate.
Fig. 12– Activate
13. On the side menu, expand the Manage tab and select the Things option. In the next window, click Register a thing.
Fig. 13 – Register a thing
14. In the new tab, click Create a single thing.
Fig. 14 – Create a single thing
15. Name the device in the Name field.
Fig. 15– Name the device
16. Create a device type by clicking the Create a type button.
Fig. 16 – Create a type

NOVUS AUTOMATION 7/13
17. In the new windows, assign a name for the type and click Create a thing type.
Fig. 17 – Create thing type
18. After create a type, click Next. In the new window, click Create thing without certificate.
Fig. 18 – Create thing without certificate
19. In the side menu, select the Secure tab and access the Certificates option. Check the existing certificate, open the Actions
tab and click Attach thing.
Fig. 19– Attach thing

NOVUS AUTOMATION 8/13
20. In the new window, check the item to be attached and click Attach.
Fig. 20 – Attach things to certificates
21. In the side menu, access the Settings option. Save the AWS account custom endpoint.
Fig. 21 – Custom endpoint

NOVUS AUTOMATION 9/13
22. Run NXperience. Connect LogBox Wi-Fi via USB interface or via Modbus-TCP. Enable the Wi-Fi interface on the Wi-Fi tab
in the Communication NXperience tab. Access the MQTT tab and configure it with the following parameters:
Fig. 22 – Communication
•Enable MQTT: Enable the MQTT protocol.
•Service Port:8883.
•QoS: 1 (AWS does not allow QoS 2).
•Broker IP or URL:Insert Endpoint saved in Step 21. Ex.: a2jsauz3jc3c1e-ats.iot.us-east-2.amazonaws.com.
•Security:TLS V1.2 – Self signed.
•CA Certificate:Load the Amazon Root CA certificate. Ex.: AmazonRootCA1.pem.
•Client Certificate:Load the "thing" certificate. Ex.: 993cb74d0b-certificate.pem.crt.txt.
•Private Key:Load the private key certificate. Ex.: 993cb74d0b-private.pem.key.
23. Send the new configurations to the LogBox Wi-Fi.
24. Return to the AWS console and, in the side menu, select the Test option. In the Subscription topic field, type "novus/#" and
click on Subscribe to topic.
Fig. 23 – Subscription topic
The "novus/#" topic will be as shown in Fig. 24:
Fig. 24 – "novus/#" topic

NOVUS AUTOMATION 10/13
25. Restart the device and wait for the previously programmed data to be sent. This procedure will allow you to observe the data
being delivered to the Broker, as shown in Fig. 25, Fig. 26 and Fig. 27:
Fig. 25 – /config topic
Fig. 26 – /neighbor topic
Fig. 27 – /log/channels topic

NOVUS AUTOMATION 11/13
26. In order to perform connectivity tests with the server, you can publish a message in a topic. You must type "novus/" in the
blank field in the "novus/#" topic, as shown in Fig. 28, and click Publish to topic.
Fig. 28 – Publish
By default, the message "Hello from AWS IoT console" will be sent:
Fig. 29 – Default message
The message can be modified by editing the field represented by Fig. 30:
Fig. 30 – Successfully received package
We should obtain the following result:
Fig. 31 – Edit the message

NOVUS AUTOMATION 12/13
3. OPTIONAL STEPS
Steps 24, 25 and 26 can optionally be performed in the MQTT Box software, which can be downloaded for free via the link
http://workswithweb.com/mqttbox.html.
27. Run the MQTT Box software and click Create MQTT Client.
Fig. 32 – Create MQTT Client
28. In the configuration window, fill in the available fields with the following values:
•MQTT Client Name: Enter client name. Ex.: AWS Broker.
•Protocol: mqtt / tls.
•Host: Enter the Endpoint address saved in Step 21. Ex.: a2jsauz3jc3c1e-ats.iot.us-east-2.amazonaws.com.
•SSL / TLS Version: TLSv1.2.
•SSL / TLS Certificate Type: Self signed certificates.
•CA File: Load the Amazon Root CA certificate. Ex.: AmazonRootCA1.pem.
•Client certificate file: Load the "thing" certificate. Ex.: 993cb74d0b-certificate.pem.crt.txt.
•Client key file: Load the private key certificate. Ex.: 993cb74d0b-private.pem.key.
You do not need to make any changes to the other settings.
Fig. 32 – MQTT Box configuration

NOVUS AUTOMATION 13/13
29. After saving the settings above, check if the MQTT client is connected.
In the Topic to subscribe field, type "novus/#". By using this wildcard, the client will sign up for all topics that NOVUS devices
post.
Fig. 33 – Topics subscribe
30. Wait for the device to reconnect to the Wi-Fi network.
Run the MQTT Box software and verify that the data is correctly delivered to the Broker, as shown in Fig. 34:
Fig. 34 – Broker MQTT