Azure Sphere

{{Multiple issues|{{Promotional|date=June 2020}}

{{Buzzword|date=June 2020}}}}

{{Infobox OS

| name = Azure Sphere

| logo = Azure_Sphere_Logo.svg

| logo caption =

| logo size = 280px

| logo alt =

| screenshot =

| caption =

| screenshot_size =

| screenshot_alt =

| collapsible =

| version of =

| developer = Microsoft

| family = Unix-like (Linux)

| working state = Current

| source model = At least partially open source

| released = {{Start date and age|2018}}

| discontinued =

| RTM date =

| GA date = {{Start date and age|February 24, 2020|df=yes/no}}

| latest release version = 23.05

| latest release date = {{Start date and age|June 20, 2023}}{{cite web |title=What's new in Azure Sphere |url=https://learn.microsoft.com/en-us/azure-sphere/product-overview/whats-new?view=azure-sphere-legacy#whats-new-in-the-2305-release |website=learn.microsoft.com/ | date=26 September 2024 |publisher=Microsoft}}

| latest preview version = 19.10{{cite web | url=https://azure.microsoft.com/en-us/updates/update-19-10-for-azure-sphere-now-available/ | title=Update 19.10 for Azure Sphere now available | publisher=azure.microsoft.com | date=November 7, 2019 | accessdate=November 7, 2019}}

| latest preview date = {{Start date and age|2019|11|07|df=no}}

| marketing target =

| programmed in = C and others

| language =

| update model =

| package manager =

| supported platforms = ARM (MediaTek MT3620)

| kernel type = Monolithic kernel

| userland =

| ui =

| license = Proprietary

| preceded by =

| succeeded by =

| website = {{URL|https://azure.microsoft.com/en-us/services/azure-sphere/}}

| support status =

| other articles =

}}

Azure Sphere is an application platform with integrated communications and security features developed and managed by Microsoft for Internet Connected Devices.

The platform consists of integrated hardware built around a silicon chip: the Azure Sphere OS (operating system for Azure Sphere), an operating system based on Linux, and the Azure Sphere Security Service, a cloud-based security service. Azure Sphere security was developed based on Microsoft Research's position on the seven required characteristics of highly secure devices.

Azure Sphere OS

The Azure Sphere OS is a custom Linux-based microcontroller operating system created by Microsoft to run on an Azure Sphere-certified chip and to connect to the Azure Sphere Security Service.{{Cite web|url=https://www.theregister.com/2018/05/21/azure_sphere_goes_retro_in_its_43_year_old_altair_basic_boots/|title=Now that's old-school cool: Microsoft techies slap Azure Sphere IoT chip in an Altair 8800|first=Richard|last=Speed|website=www.theregister.com}}{{Cite web|url=https://arstechnica.com/gadgets/2018/04/microsofts-bid-to-secure-the-internet-of-things-custom-linux-custom-chips-azure/|title=Microsoft's bid to secure the Internet of Things: Custom Linux, custom chips, Azure|first=Ars|last=Staff|date=April 16, 2018|website=Ars Technica}}{{Cite web|url=https://www.pcworld.com/article/401834/microsofts-chip-push-continues-with-azure-sphere-securing-gadgets-with-chips-and-linux.html|title=Microsoft's chip push continues with Azure Sphere: Securing gadgets with chips and Linux}} The Azure Sphere OS provides a platform for Internet of things application development, including both high-level applications and real-time-capable applications. It is the first operating system running a Linux kernel{{Cite web|url=https://www.digitaltrends.com/computing/microsoft-azure-sphere-os-based-on-linux-not-windows/|title=Linux Is Microsoft's OS of Choice for Internet of Things Devices|date=April 17, 2018|website=Digital Trends}} that Microsoft has publicly released and the second Unix-like operating system that the company has developed for external (public) users, the other being Xenix.

Azure Sphere Security Service

The Azure Sphere Security Service, also known as AS3, is a cloud-based service that facilitates maintenance, updates, and control for Azure Sphere-certified chips.{{Cite web |last=richcalaway |title=Terminology - Azure Sphere |url=https://docs.microsoft.com/en-us/azure-sphere/product-overview/terminology |access-date=2022-08-05 |website=docs.microsoft.com |language=en-us}} The Azure Sphere Security Service establishes a secure connection between devices and the internet or cloud services and ensures secure boot. The primary purpose of contact between an Azure Sphere device and the Azure Sphere Security Service is to authenticate the device identity, ensure the integrity and trust of the system software, and certify that the device is running a trusted code base. The service also provides a secure channel for Microsoft to automatically download and install Azure Sphere OS updates and customer application updates to deployed devices.{{Cite web |last=MSV |first=Janakiram |title=Why Azure Sphere From Microsoft Is A Big Deal For The IoT Ecosystem |url=https://www.forbes.com/sites/janakirammsv/2020/02/25/why-azure-sphere-from-microsoft-is-a-big-deal-for-the-iot-ecosystem/ |access-date=2024-12-30 |website=Forbes |language=en}}

Azure Sphere chips and hardware

Azure Sphere-certified chips and hardware support two general implementation categories: greenfield and brownfield. Greenfield implementation involves designing and building new IoT devices with an Azure Sphere-certified chip. Azure Sphere-certified chips are currently produced by MediaTek.{{Cite web |url=https://www.mediatek.com/products/iot/azure-sphere |title=Azure Sphere |access-date=2018-04-18 |archive-url=https://web.archive.org/web/20180614021357/https://www.mediatek.com/products/iot/azure-sphere |archive-date=2018-06-14 |url-status=dead }} In June 2019, NXP announced plans to produce a line of Azure Sphere-certified chips. In October 2019, Qualcomm announced plans to produce the first Azure Sphere-certified chips with cellular capabilities.{{cite web | url=https://build5nines.com/qualcomm-build-azure-sphere-chips-cellular-connectivity/ | title=Qualcomm to build Azure Sphere chips with Cellular connectivity | publisher=build5nines.com | date=October 23, 2019 | accessdate=October 23, 2019}} Brownfield implementation involves the use of an Azure Sphere guardian device to securely connect an existing device to the internet. Azure Sphere guardian modules are currently produced by Avnet.

Microsoft Pluton

Pluton is a Microsoft-designed security subsystem that implements a hardware-based root of trust for Azure Sphere. It includes a security processor core, cryptographic engines, a hardware random number generator, public/private key generation, asymmetric and symmetric encryption, support for elliptic curve digital signature algorithm (ECDSA) verification for secured boot, and measured boot in silicon to support remote attestation with a cloud service, and various tampering counter-measures.{{Cite web |last=Team |first=Microsoft 365 Defender Threat Intelligence |date=2020-11-17 |title=Meet the Microsoft Pluton processor – The security chip designed for the future of Windows PCs |url=https://www.microsoft.com/en-us/security/blog/2020/11/17/meet-the-microsoft-pluton-processor-the-security-chip-designed-for-the-future-of-windows-pcs/ |access-date=2022-11-26 |website=Microsoft Security Blog |language=en-US}}{{Cite web |last=vinaypamnani-msft |title=Microsoft Pluton as Trusted Platform Module (TPM 2.0) |url=https://learn.microsoft.com/en-us/windows/security/information-protection/pluton/pluton-as-tpm |access-date=2022-11-26 |website=learn.microsoft.com |language=en-us}}