Transparent Mode And Tls; Api Mode And Tls; Key Formats; Certificate Formats - Digi XBee 3 Cellular LTE-M User Manual

Transport Layer Security (TLS)
1. No authentication: None of the parameters are provided, this is the default value. With this
configuration identity is not validated and a man in the middle (MITM) attack is possible.
2. Server authentication: Only ca_cert is provided. Only the servers identity is checked
3. Mutual authentication: All items are provided and both sides are assured of the identity of their
peer
It is not possible to only have client authentication.

Transparent mode and TLS

Transparent mode connections made when
specified by $0 (TLS Profile
Note For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.

API mode and TLS

On the Transmit (TX) Request: IPv4 - 0x20
configuration specified by
Profile - 0x23 lets you choose the IP setting for the serial data.
Note For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.

Key formats

The RSA PKCS#1 format is the only common format across XBee Cellular device variants. You can
identify a PKCS#1 key file by the presence of BEGIN RSA PRIVATE KEY in the file header.
Digi's implementation does not support encrypted keys, we use file system encryption to protect the
keys at rest in the system.
Note For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.

Certificate formats

For SARA-R410 cellular components used in the XBee 3 Cellular LTE-M Global Smart Modem, if the
server certificate has a Common Name (CN) that is greater than 31 characters the SSL connection
fails.
Note For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.

Certificate limitations

The XBee Smart Modem only supports certificate files that contain a single certificate in them.
Digi XBee® 3 Cellular LTE-M/NB-IoT Global Smart Modem User Guide
IP (IP Protocol)
0).
frame, when you specify protocol 4 (TLS), the profile
$0 (TLS Profile 0) is used to form the TLS connection.
Transparent mode and TLS
= 4 (TLS) are made using the configuration
Tx Request with TLS
179