# Identification for update **URL:** \ **Category:** General Discussions\ **Created:** [September 11, 2019, 2:40pm UTC](https://hub.mender.io/t/identification-for-update/1005 "2019-09-11T14:40:17Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![urszaugg](https://avatars.discourse-cdn.com/v4/letter/u/dec6dc/32.png) [@urszaugg](https://hub.mender.io/u/urszaugg)\ **Post date:** [September 11, 2019, 2:40pm UTC](https://hub.mender.io/t/identification-for-update/1005/1 "2019-09-11T14:40:17Z")
We started an update (on the mender-server) for one device and the update started on two devices. One of the device is an image copy of the other one for which we wanted to update. I thought mender will check the identity and the public key for verification if the update is for this device. Is that wrong, or why it can happen, that the update starts on both devices? I checked that the identity is not the same on both devices. Of course the key is the same (copy of the image). ---
**Author:** ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)\ **Post date:** [September 12, 2019, 6:40am UTC](https://hub.mender.io/t/identification-for-update/1005/2 "2019-09-12T06:40:29Z")
How did you start the deployment? Was it using the “CREATE DEPLOYMENT FOR THIS DEVICE” or did you do it trough the “Deployments” tab? Which group where you targeting? Can you share how they the devices are listed in GUI? Also so that one can see identities. Also share the information that is displayed from deployment history for that specific deployment. > I thought mender will check the identity and the public key for verification if the update is for this device I am not sure what you mean here, and it depends a bit on how you create a deployment. Mender Artifacts “per see” are not bound to specific devices, and what devices are to get the deployment is decided when you create an actual deployment. Hence my many questions above 🙂 ---
**Author:** ![urszaugg](https://avatars.discourse-cdn.com/v4/letter/u/dec6dc/32.png) [@urszaugg](https://hub.mender.io/u/urszaugg)\ **Post date:** [September 12, 2019, 7:19am UTC](https://hub.mender.io/t/identification-for-update/1005/3 "2019-09-12T07:19:39Z")
I started the deployment with “CREATE DEPLOYMENT FOR THIS DEVICE”. I have forgotten to write, that the other device was not yet accepted (see screenshot). Screenshot for the device which should be updated: ![grafik](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/b5424f0684f07bf55db29d9019fa18bda0741e8d.png) Screenshot of the device which was also updated: ![grafik](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/1ba8df8c7a288d4282535e7caaff9456e1f315ae.png) ---
**Author:** ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)\ **Post date:** [September 12, 2019, 7:27am UTC](https://hub.mender.io/t/identification-for-update/1005/4 "2019-09-12T07:27:35Z")
Forgot to ask, which server version are you running? Can you also share a picture of the deployment? ---
**Author:** ![urszaugg](https://avatars.discourse-cdn.com/v4/letter/u/dec6dc/32.png) [@urszaugg](https://hub.mender.io/u/urszaugg)\ **Post date:** [September 12, 2019, 8:23am UTC](https://hub.mender.io/t/identification-for-update/1005/5 "2019-09-12T08:23:49Z")
We are using [hosted.mender.io](http://hosted.mender.io) (master). Here is the picture of the deployment: ![grafik](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/7048f9c5818917ba7df5ad7852048b1474b53faa.png) ---
**Author:** ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)\ **Post date:** [September 12, 2019, 8:43am UTC](https://hub.mender.io/t/identification-for-update/1005/6 "2019-09-12T08:43:49Z")
But your picture only shows **one** device was being updated. But you said, > [@urszaugg](#): > > Is that wrong, or why it can happen, that the update starts on both devices? I think I have enough information and I will try to reproduce this as well, I am not quite sure what happens when you have the same public key bound to different device identities. This is not something we would recommended you to do from a security perspective anyway and I need to investigate if it is “valid” to do so if you choose to do so. ---
**Author:** ![urszaugg](https://avatars.discourse-cdn.com/v4/letter/u/dec6dc/32.png) [@urszaugg](https://hub.mender.io/u/urszaugg)\ **Post date:** [September 12, 2019, 9:10am UTC](https://hub.mender.io/t/identification-for-update/1005/7 "2019-09-12T09:10:15Z")
On the mender-server it is only one device which is deployed. But we saw on the device, that it starts deployment. ---
**Author:** ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)\ **Post date:** [September 12, 2019, 9:14am UTC](https://hub.mender.io/t/identification-for-update/1005/8 "2019-09-12T09:14:25Z")
> On the mender-server it is only one device which is deployed. But we saw on the device, that it starts deployment. I suspect that there something else going on. Because a device in “Pending” state is not able to community with the server and would never be able to see that there is a deployment ready for it (it wont even be asking the server for updates until it is authorized) But I could image if you have two devices that have the same identity and public key, these would be represented as **one** device on the server and might explain what you saw. Could this be the case? ---
**Author:** ![urszaugg](https://avatars.discourse-cdn.com/v4/letter/u/dec6dc/32.png) [@urszaugg](https://hub.mender.io/u/urszaugg)\ **Post date:** [September 12, 2019, 10:05am UTC](https://hub.mender.io/t/identification-for-update/1005/9 "2019-09-12T10:05:42Z")
The script on the device for the identity gives different values. Therefore the identity is not the same, but the public key is the same. Is there something which is persistent for the identiy? Because the image is copied from the first one which was already accepted. ---
**Author:** ![mirzak](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/mirzak/32/2056_2.png) [@mirzak](https://hub.mender.io/u/mirzak)\ **Post date:** [September 12, 2019, 10:44am UTC](https://hub.mender.io/t/identification-for-update/1005/10 "2019-09-12T10:44:41Z")
> [@urszaugg](#): > > Is there something which is persistent for the identiy? Unclear to me. I do not know what you use for identity as it does not seem to be the default (which is MAC address and this typically is different on different devices, but this also depends on how your device sets the MAC address). But the identity is decided by a script on the device, e.g: ```auto $ /usr/share/mender/identity/mender-device-identity using interface /sys/class/net/eth0 mac=00:14:2d:62:d3:a8 ``` ---
**Author:** ![urszaugg](https://avatars.discourse-cdn.com/v4/letter/u/dec6dc/32.png) [@urszaugg](https://hub.mender.io/u/urszaugg)\ **Post date:** [September 12, 2019, 12:52pm UTC](https://hub.mender.io/t/identification-for-update/1005/11 "2019-09-12T12:52:36Z")
We use a custom script for the identity, which is depending on CPU Serial Number and the MAC address. I was not sure if you store this information somewhere. If it is only this script, then it is what I have expected.