Zigbee security Device registration
Digi XBee® 3 Zigbee® RF Module
127
n EO = 2
l This forms the network as a centralized trust center. If you want a distributed trust center,
set this parameter to 0.
l Any joining device must have the same value set to properly handle any key exchanges that
occur.
n KY = non-zero
l This defines a preconfigured link key for the network.
l This key can be configured on joining devices as a preconfigured global link key.
l If joining devices do not use the preconfigured link key, they must be registered to the
trust center before joining.
n NK = 0
l Using a zero NK value is preferred, as the XBee will generate a random network key that
cannot be read.
l If acting as a centralized trust center, this parameter can be changed after network
formation to update the network key for all devices on the network.
n NJ < 0xFF
This defines the amount of time you want to allow devices to join when the join window opens.
You can modify this after the network forms.
If you want to increase the level of security for this network, set KY = 0 on the forming node. This
generates a random link key that cannot be read and requires every joining device to be individually
registered. This configuration guarantees that only authorized devices can join the network, because
the global link key is unclear and cannot be read.
Example: Join a secure network using a preconfigured link key
The following examples show you how join an existing network that has security enabled and the
preconfigured link key configured on the network is known. Using this example, it is easy to deploy a
secure network, because each device is preconfigured to join the network. An installer only needs to
be concerned with opening the join window for new devices.
Configure a joining XBee 3 device with the following parameters:
n EE = 1
The joining node must have the same encryption settings as the network it will be joining.
n EO = 2
l If joining a centralized trust center, EO bit 1 must be set so the joining device is aware that
a link key exchange is needed.
l If joining a distributed trust center, clear EO bit 1.
n KY = KY from trust center
Because the KY value is known, it should be preconfigured on the joining device. Provided the
KY values match, it will be able to obtain the network key and join.
n NJ < 0xFF
Consider the join time that is configured on joining devices. If the device successfully joins the
network as a router (SM = 0), it immediately opens the join window for NJ seconds, effectively
To Next Page
Loading...
Need help?
General
