Home

Using security in EmberZNet

Categories:

Here are the 4 main types of security configurations in EmberZNet 3.0.1. I have enumerated below all the ways the Security bitmask should be set.

  1. Pre-configured Link Key operating in a network with a Trust Center
  2. No pre-configured Link Key operating in a network with a Trust Center
  3. Pre-configured Link Key operating in a network without a Trust Center (non-compliant)
  4. No pre-configured Link Key operating in a network without a Trust Center (non-compliant)


1. Pre-configured Link Keys operating in a network with a Trust Center

Trust Center Configuration: 0x0304

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (0)
  • Bit 2 : Global Link Key (1)
  • Bit 8 : Have Pre-configured Key (1)
  • Bit 9 : Have Network Key (1)
  • Bit 10 : Get Link Key after join (0)
  • Bit 11 : Require Encrypted Key (0)


Joining Device Configuration: 0x0900

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (0)
  • Bit 2 : Global Link Key (0)
  • Bit 8 : Have Pre-configured Key (1)
  • Bit 9 : Have Network Key (0)
  • Bit 10 : Get Link Key after join (0)
  • Bit 11 : Require Encrypted Key (1)


2. No pre-configured Link Key operating in a network with a Trust Center

Trust Center Configuration: 0x0304

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (0)
  • Bit 2 : Global Link Key (1)
  • Bit 8 : Have Pre-configured Key (1)
  • Bit 9 : Have Network Key (1)
  • Bit 10 : Get Link Key after join (0)
  • Bit 11 : Require Encrypted Key (0)


Joining Device Configuration: 0x0400

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (0)
  • Bit 2 : Global Link Key (0)
  • Bit 8 : Have Pre-configured Key (0)
  • Bit 9 : Have Network Key (0)
  • Bit 10 : Get Link Key after join (1)
  • Bit 11 : Require Encrypted Key (0)


3. Pre-configured Link Keys operating in a network without a Trust Center (non-compliant)

Trust Center Configuration: 0x0306

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (1)
  • Bit 2 : Global Link Key (1)
  • Bit 8 : Have Pre-configured Key (1)
  • Bit 9 : Have Network Key (1)
  • Bit 10 : Get Link Key after join (0)
  • Bit 11 : Require Encrypted Key (0)


Joining Device Configuration: 0x0900

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (0)
  • Bit 2 : Global Link Key (0)
  • Bit 8 : Have Pre-configured Key (1)
  • Bit 9 : Have Network Key (0)
  • Bit 10 : Get Link Key after join (0)
  • Bit 11 : Require Encrypted Key (1)


4. No pre-configured Link Key operating in a network without a Trust Center (non-compliant)

Trust Center Configuration: 0x0306

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (1)
  • Bit 2 : Global Link Key (1)
  • Bit 8 : Have Pre-configured Key (1)
  • Bit 9 : Have Network Key (1)
  • Bit 10 : Get Link Key after join (0)
  • Bit 11 : Require Encrypted Key (0)


Joining Device Configuration: 0x0400

  • Bit 0 : Standard Security (0)
  • Bit 1 : No Trust Center mode (0)
  • Bit 2 : Global Link Key (0)
  • Bit 8 : Have Pre-configured Key (0)
  • Bit 9 : Have Network Key (0)
  • Bit 10 : Get Link Key after join (1)
  • Bit 11 : Require Encrypted Key (0)