Mass production devices-阿里云帮助中心

To register with the cloud, each device must be flashed with identity information issued by the IoT Platform.

Prerequisites

You have completed product development and published the product. For more information, see Publish a Tmall Genie ecosystem product and Publish a private brand project product.
You have purchased or requested a specific number of activation codes. For more information, see Activation code billing.

Background information

An activation code is a unique credential that a device uses to connect to the IoT Platform. The platform provides two methods to flash activation codes.

Per-device secret (recommended): The platform issues a unique key (DeviceSecret) for each device. During mass production, each device must be flashed with its unique key. This method is highly secure.
Per-product secret: The platform issues one key (ProductSecret) for each product model. During mass production, all devices of the same model are flashed with the same key.
To protect devices from cyberattacks and forgery, the platform requires you to pre-register the DeviceName (such as a MAC address, SN, or IMEI) of each device that uses the per-product secret method. When a device connects to the cloud for the first time, the platform uses this DeviceName to verify its identity.

Note Because gateways act as a proxy for Zigbee sub-devices to connect to the network, the platform recommends using the per-product secret method for Zigbee devices. This means the gateway only needs to proxy the ProductKey of the sub-devices to enable them to connect to the cloud.

The following table compares the two flashing methods.

Item	Per-device secret	Per-product secret
Information to flash to the device	ProductKey, DeviceSecret, and DeviceName (typically the device's MAC address, SN, or similar ID)	ProductKey, ProductSecret, and DeviceName (typically the device's MAC address, SN, or similar ID)
Security	High	Standard
Are there quota limits?	Yes, the limit is 500,000 per product.	Yes, a limit of 500,000 devices per product.
How to enable in the console	Enabled by default	Mass Production > Flashing Method > Enable Per-product Secret
Shutting down the console	This is the default method and cannot be disabled.	Mass Production > Flashing Method > Cancel Per-product Secret Warning This is a high-risk operation. Proceed with caution. For more information, see the description below.
DeviceName generation method	Automatic generation or batch upload	Batch upload
Tmall Genie ecosystem project	Supported	Not supported
Private brand project	Supported	Supported

Note

During mass production, ensure that the information to be flashed is correct. If incorrect information is flashed, it cannot be changed on the device. You must flash the device again.
To prevent device spoofing and attacks from leaked ProductKeys and ProductSecrets, the cloud does not allow activated devices to reacquire device certificates. You must persistently store and protect the device certificates on the device. Do not purge the device certificate information when you restore the device to its factory settings.
If you disable the per-product secret method, devices that were flashed using this method can no longer be activated to connect to the network. This does not affect devices that are already connected. Disabling this method after mass production may lead to consumer complaints and financial losses. Proceed with caution.

Mass Production Devices

On the project homepage, click Mass Production.
Select a product with a status of Published. In the Flashing Method column, select a method to flash device certificates for mass production.
You can select either the Per-device secret or Per-product secret method. The differences are as follows:
- To select the Per-device secret method:
  The Per-device secret method is selected by default. No changes are needed.
- To select the Per-product secret method:
  In the Flashing Method column, click Per-device secret, select the Per-product secret checkbox, and then click OK in the dialog box that appears.
  
  Note To cancel the per-product secret method, clear the Per-product secret checkbox.
  Canceling the Per-product secret method prevents devices that were previously flashed with this method from activating and connecting to the network. If you have already used the per-product secret method to flash devices, do not cancel it.
Select the product for mass production. In the operations column, click Batch Production to configure the activation code generation method, and then perform the operations that correspond to your selected flashing method.
You can choose to generate activation codes automatically or in a batch. The maximum number of devices that you can add for a single product is 500,000.
- Automatic generation: The platform automatically generates a DeviceName and a DeviceSecret. You can then flash them to each device. For this method, you only need to configure the number of devices to flash.
  
  Note For Bluetooth devices, the MAC address must be used as the DeviceName. The platform automatically uploads the product's MAC addresses from the official platform IPAM pool to generate the DeviceNames.
  Automatic activation code generation is supported for both Tmall Genie ecosystem projects and private brand projects.
- Batch upload: Enter the device IDs (such as MAC addresses, SNs, or IMEIs) of the devices to be activated into an Excel file to use as DeviceNames. Upload the Excel file to the platform. The platform then automatically generates a DeviceSecret for each DeviceName.
  
  Note Per-product secret flashing method only supports the Batch upload method for generating activation codes.
Click OK to finish.