UPDATE - Looked into this a bit more, seems like you're trying to use your own CA because you'd register your own client certificates signed by that CA to use for your devices, in which case, the Greengrass
aws.greengrass.FleetProvisioningPlugin will not help, you can use this plugin if you're okay using the Amazon Root CA and let IoT Core generate client certificates for you from the claim certificate and provisioning template. If that doesn't work for you, you may be looking for JITP/JITR options IoT Core provides https://docs.aws.amazon.com/iot/latest/developerguide/jit-provisioning.html and https://docs.aws.amazon.com/iot/latest/developerguide/auto-register-device-cert.html
Thanks for using Greengrass. It's hard to tell just by the error message why it failed, but common reasons for this issue are using the incorrect IoT data endpoint or the root CA certificate, could you tell us what configuration options you provided while installing Greengrass using the
aws.greengrass.FleetProvisioningByClaim plugin? https://docs.aws.amazon.com/greengrass/v2/developerguide/fleet-provisioning.html As described here, please ensure that you're using the ATS IoT data endpoint and placing the Amazon Root CA certificate on the device you're trying to provision. Did you see the private key and certificate files downloaded on the device, if not, were there any other failure logs in greengrass.log file? It will be helpful if you can share the logs too.
You could also try enabling monitoring for connection failures in CloudWatch to get logs in your AWS account https://docs.aws.amazon.com/iot/latest/developerguide/cloud-watch-logs.html It might not provide information for client side issues but will make troubleshooting easier overall.
Confusion on Greengrass Certificate RotationAccepted Answerasked 2 years ago
Can Greengrass use a Lambda in the Core if needed?asked 10 months ago
Greengrass vs. IoT Coreasked 7 months ago
Aws iot core and greengrass for Android devicesasked 3 months ago
Use our own CA cert with Greengrass aws.greengrass.FleetProvisioningByClaim.jarasked 7 months ago
Just in time provisioning for Greengrass v2 core devicesAccepted Answerasked 9 months ago
Greengrass v2 fleet provisioning in dockerAccepted Answerasked 10 months ago
Unable to authenticate to AWS IoT using private CAasked 3 months ago
Using Private CA In AWS IoTAccepted Answerasked 2 years ago
Fleet Provisioning -- Greengrass Core installation Issueasked a year ago