ReliaGATE 10-14 GreenEdge

Revision History

Overview

The ReliaGATE 10-14 GreenEdge is an industrial, highly secure Edge Gateway with Zero-Touch Provisioning capabilities and AWS IoT Greengrass V2. Kickstart your IoT project thanks to Eurotech Everyware Software Framework (ESF), an expandable and open IoT environment that supports all major cloud providers and services, including AWS IoT Greengrass v2, with zero-touch provisioning; moreover it features an extensive set of drivers for all major industrial protocols.

Thanks to carrier certified LTE with 2G/3G backup connectivity, the ReliaGATE 10-14 GreenEdge is suitable for immediate deployment in North America and Europe, with options to expand the geographic coverage to a truly global scale.

The ReliaGATE 10-14 GreenEdge offers best in class Cybersecurity: it leads the market with IEC 62443-4-1/-4-2 and PSA Level 1 certification; it is also compliant with California SB-327 password law. Protection starts at the hardware level, with full support for TPM 2.0, pre-injected credentials for Zero-Touch Provisioning, Secure Boot and an always-on physical antitampering monitor/logger that is active even when the system is removed from power.

The device does not come with Cybersecurity hardening enabled. For further information about Cybersecurity certifications please contact Eurotech Support. Antitampering detector works for a limited time when the device is removed from power. Please contact Eurotech Support to get advice on tampering detection strategies.

The product requires you to subscribe to the AWS Marketplace offering.

Please check the offering on the AWS marketplace:

• Everyware GreenEdge - US
• Everyware GreenEdge - EU

With Everyware GreenEdge SaaS subscription, you will receive these unique benefits:

• Credential management service with zero-touch provisioning: onboard and provision your device fleet with a simple and secure process. It takes few minutes to get your first device connected to AWS IoT
• Streamlined device management with Eurotech Everyware Cloud (EC): monitor, supervision, upgrade devices, ensuring uninterrupted operations, minimal downtime, and integration with your enterprise systems
• Eurotech Everyware Software Framework (ESF) + ESF Industrial pack: an extensive set of industrial protocols to accelerate your integration and connect to your equipment: Modbus, OPC-UA, S7, FANUC, ETherNet/IP, TwinCAT, MQTT, BLE, and more to come.
• AWS IoT Greengrass v2 preinstalled: automatically provision your thing and start sending data in minutes.
• Software updates: receive GreenEdge software updates and security fixes to keep your system up-to-date and protected from vulnerabilities.
• Unified billing: the contract and the billing is managed through aws.
• Extensive documentation and tutorials to support your growth: build your Proof of Value by following simple tutorials and grow your application with cookbook recipes for specific use cases. Combine Southbound connectivity configurations with edge-processing recipes and accelerate your time to market.

Everyware Software Framework (ESF), a commercial, enterprise-ready edition of Eclipse Kura, the open source Java/OSGi middleware for IoT Edge Gateways. Distributed and supported by Eurotech, ESF supports ready-to-use field protocols (including Modbus, OPC-UA, S7), MQTT connectivity, web-based visual data flow programming and deep configuration. ESF is also integrated with Everyware Cloud (EC) SaaS, Eurotech IoT Integration Platform, enabling advanced diagnostics, zero-touch provisioning, and full remote device access and management.

Hardware Description

Based on the NXP i.MX 8M Mini Cortex-A53 quad core processor, with up to 4GB of RAM, up to 32GB of eMMC and a user-accessible microSD slot, the ReliaGATE 10-14 is a low power gateway suitable for lightly rugged use cases: it supports a 9 to 30VDC power supply with transient protection, two protected and isolated RS-232/RS-422/RS-485 serial ports, two noise and surge protected USB ports, six optoisolated digital and two isolated analog interfaces. The ReliaGATE 10-14 features a wide range of connectivity capabilities: it integrates a carrier certified LTE Cat 1/4 cellular modem with dual SIM support, Wi-Fi, Bluetooth 5/BLE, and two Gigabit Ethernet ports; an internal GNSS provides precise geolocation capabilities. Expansion options allow adding extra features with side modules, such as the ReliaWAN 10-12, a Lora Gateway unit, or the ReliaIO 10-12, which provides analog input and more DI/O ports.

Datasheet

• ReliaGATE 10-14 GreenEdge Datasheet

Standard Kit Contents

You will receive your Everyware GreenEdge product ready to be powered on with no additional hardware. By ordering a DevKit, you will also receive a Power Supply for your region, antennas for WiFi and Cellular connectivity and a Ethernet Cat 5 cable.

Visit the product page for info on ordering codes.

• ReliaGATE 10-14 Web page

User provided items

A PC (Windows, Linux or Mac OS) with an Ethernet port and an Ethernet cable or Wi-Fi(TM) to connect to the device.

3rd Party purchasable items

Not Applicable.

Custom Configuration and Cybersecurity hardening

Eurotech configuration management service allows fine tuning the ReliaGATE 10-14 GreenEdge to meet and exceed your project requirements; examples of personalized configuration include customer branding (with logo and custom colors) and can go to deep customization with a range of options for project specific requirements (such as frame grabbers, choice of internal components, etc.).

The ReliaGATE 10-14 GreenEdge can also be hardened to meet IEC 62443-4-2 requirements, with specific support and maintenance services to protect the device from vulnerabilities and avoid service disruptions.

Call us for more information on configuration management options.

Set up Your Development Environment

Operating System

Your Everyware GreenEdge product runs Eurotech Everyware Linux, an optimized version of Yocto Linux specifically aimed at supporting industrial environment.

Tools Installation

Your Everyware GreenEdge product is distributed with the latest version of ESF already installed and ready to start, with pre-injected, per-device Trusted Identities that enable zero-touch provisioning and Zero Trust architecture.

In order to develop and deploy applications on ESF, you can follow the dedicated guides here.

If you need to build your native applications on this target hardware, please contact us to receive the latest toolchain.

Additional References

Detailed documentation on the features provided by the available services running on your Everyware GreenEdge product can be found in the ESF official documentation, here.

Set up Your Hardware

Top Side Overview

Bottom Side Overview

LED indicators Overview

Setup Your AWS Account

Refer to the online AWS documentation at Set up your AWS Account. Follow the steps outlined in the sections below to create your account and a user and get started:

• Sign up for an AWS account and
• Create a user and grant permissions
• Open the AWS IoT console

Pay special attention to the Notes.

Install the AWS CLI or use the CloudShell

To install the AWS CLI on your host machine, refer to the instructions at Installing the AWS CLI v2. Installing the CLI is needed to complete the instructions in this guide.

Once you have installed AWS CLI, configure it as per the instructions in this online guide. Set the appropriate values for Access key ID, Secret access key, and AWS Region. You can set Output format to "json" if you prefer.

Alternatively, you can use the AWS Cloudshell to send the same AWS CLI commands directly from your browser.

AWS CloudShell

Subscribe to Eurotech Everyware GreenEdge on AWS marketplace

After purchasing your Eurotech GreenEdge product, you need to subscribe to the AWS Marketplace offering:

• Everyware GreenEdge - US
• Everyware GreenEdge - EU

Please follow the steps on the Eurotech Everyware GreenEdge page.

For further information please check Eurotech website: Everyware GreenEdge.

User onboarding

Fill in the form with Organization Name, Organization Unit, your Full Name, your organization email, and address

Select the EST (Enrollment over Secure Transport) endpoint. As of now, the only available endpoint is the default one, provided by Eurotech.

Provide your AWS IoT data plane endpoint: use the AWS CLI aws iot describe-endpoint --endpoint-type iot:data-ATS

Provide the AWS IoT Credential Endpoint: use the AWS CLI aws iot describe-endpoint --endpoint-type iot:CredentialProvider

Select the AWS region you want your device(s) to be connected to.

Create Resources in AWS IoT

After subscribing to GreenEdge you will receive an email containing a link to an AWS CloudFormation script, which will configure the Certificate Authority on your AWS IoT endpoint (thus enabling Zero Touch Provisioning), and will create all the needed resources to run a JITP for AWS IoT Greengrass core devices on your account.

Device onboarding

In the email confirmation mentioned above, you can click on the link and login to the Everyware Cloud web console as the administrator user and proceed creating a provisioning request for your Everyware GreenEdge product.

Select Provisioning under Devices tab and select Create provisioning requests in bulk on Create new request drop-down menu.

In the Create Provisioning Request In Bulk page, provide the Serial Number and the MAC address of your Everyware GreenEdge product. These numbers are contained in the product label, as in the following example:

In Selected Services choose the Region: the only available one is the region of AWS IoT Core selected in the user onboarding form.

For the time being leave the buttons below Region to their default values.

Device power-up and connect

Please refer to the user manual of your Everyware GreenEdge product available on the Eurotech Download Area for specific information about how to supply power.

Connect your PC to the eth0 port of your Everyware GreenEdge product.

Configuration of eth0 is as follows:

DHCP server is enabled by default on eth0 port. If you want to manually connect, please ensure that the client PC uses an IP address on the same subnet as eth0 (e.g. 172.16.0.2)

Device configuration wizard

Open a web browser and connect to https://172.16.0.1

Log in using username: onboarding, password: <product S/N>

Select your connectivity interface. The default interface is the Ethernet connection: if the device is attached to a LAN with a DHCP server before you login in the onboarding UI, selection of the network interface is skipped and the onboarding UI lands on the Provisioning Configuration.

If you plan to use the cellular connectivity make sure to insert the SIM in the service panel and connect the antennas.

The SIM must be active and able to attach and register to the network in your area.

If you are using the Wi-Fi please make sure you connect the Wi-Fi antenna.

In this example we are using the Wi-Fi interface: please provide a valid SSID, select the Wi-Fi security (in this example WPA2 PSK) and provide the Wi-Fi password.

Please note that if the Wi-Fi security (WEP, WPA, WPA2 PSK, WPA/WPA2 PSK) is left to None the device will not be able to connect.

If you click on the lens in SSID field, the device will start the network scanning.

The result page lists all the available SSIDs with the access mode and the signal quality of the network. Select the desired network and provide the password.

Next, select the EC SaaS instance making sure the region matches the region of your GreenEdge subscription.

The device will start provisioning and connecting to Everyware Cloud.

The device is now connected to Everyware Cloud.

The wizard will then connect to the AWS Services selected in the Bulk Provisioning Request. If needed, the wizard will now self-provision on AWS IoT Core, configure AWS IoT Greengrass to connect to AWS IoT Core, and establishes a local IPC connection between ESF and AWS IoT Greengrass.

Now your device is ready to send data to AWS IoT.

In case of a loss of connectivity, the Internet Connection icon will switch to red.

You can retry the connection by clicking on the "connection setup" button, on the right.

Running the demo

ESF Wires can be leveraged to create a simple demo flow to test the connection to AWS IoT Core.

• Open the ESF Web Console, by accessing ESF from your browser.
• Login with your credentials (default credentials can be found in the ESF documentation)
• Navigate to the Cloud Connections section of ESF

Once the ReliaGATE 10-14 is connected to IoT Core, the relevant ESF Cloud Connector will look as follows:

• Click on "New Pub/Sub" and select a new AwsThingPublisher from the list. Assign it a name (e.g. demo.publisher)

A new Thing Publisher will be associated to this Cloud Connection. Select the newly created publisher and configure it with a unique topic (e.g. demo.topic)

• Navigate to the Wires section
• Add to the Canvas a Timer component and a Publisher component
• Link the components together
• Configure the Publisher component to link to the previously created AWSThingPublisher

• Apply the changes
• Navigate to IoT Core in the AWS Console
• Activate the MQTT test client
• subscribe to the topic configuired in the AWSThingPublisher (e.g. demo.topic)

AWS IoT Core will receive periodic timer events directly from the ESF Wire Graph.

Create the Component on Your Edge Device

Follow the instructions online under the section To create a Hello World component to create, deploy, test, update and manage a simple component on your device.

Upload the Hello World Component

Follow the instructions online at Upload your component to upload your component to the cloud, where it can be deployed to other devices as needed.

Deploy Your Component

Follow the instructions online at Deploy your component to deploy and verify that your component is running.

Accessing the ESF console

Open a web browser and connect to https://172.16.0.1/admin/console

For further information please refer to the ESF Documentation

Debugging

The default development configuration of your Everyware GreenEdge product is meant to be ease access to the system and debugging.

• Ethernet Port 1 (7) is configured as DCHP Server with a IPv4 address of 172.16.0.1.
• Ethernet Port 2 (8) is configured as DHCP Client.

SSH protocol is enabled on standard port TCP 22, with guest user access. Password is the serial number of the unit, which you can find on the product label. To access the system, run:

ssh guest@<IP Address>

You can use the eth_journalctl command to access the aggregated logs of the system:

eth_journalctl -help

Use these links for detailed information on log management and debugging.

Depending on the order code used for your Everyware GreenEdge product, the system might already be set up for production environments. Refer to the ESF Security introduction to know more about framework execution modalities.

Troubleshooting and FAQ

Please check GreenEdge troubleshooting and FAQ page as first source of information.

For any issue you might face when working with ESF, feel free to contact the awesome Eclipse Kura community here. Chances are the issue you are facing has already been solved!

For detailed documentation, browse the ESF documentation.

If you need support for IoT Core, here it's a link to the FAQ.

And finally, should you need even more support, feel free to open a ticket on our ticketing system.