Digi XBee 3 User Manual

Transport Layer Security (TLS) Transparent mode and TLS
Digi XBee® 3 Cellular LTE Cat 1 AT&T Smart Modem User Guide
181
Transparent mode and TLS
Transparent mode connections made when IP (IP Protocol) = 4 (TLS) are made using the configuration
specified by $0 (TLS Profile 0).
API mode and TLS
On the Transmit (TX) Request: IPv4 - 0x20 frame, when you specify protocol 4 (TLS), the profile
configuration specified by $0 (TLS Profile 0) is used to form the TLS connection. Tx Request with TLS
Profile - 0x23 lets you choose the IP setting for the serial data.
Key formats
The RSA PKCS#1 format is the only common format across XBee Cellular device variants. You can
identify a PKCS#1 key file by the presence of BEGIN RSA PRIVATE KEY in the file header.
Digi's implementation does not support encrypted keys, we use file system encryption to protect the
keys at rest in the system.
Certificate limitations
The XBee Smart Modem only supports certificate files that contain a single certificate in them.
The implications of this are:
n For client certificate files (for example when client authentication is required):
l Self-signed certificates will work.
l Certificates signed by the root CA will work, because the root CA can be omitted per RFC
5246. The root certificate authority may be omitted from the chain, under the assumption
that the remote end must already possess it in order to validate it in any case.
l Certificate chains that include a intermediate CA are problematic. To work around this the
client's certificate chain has to be supplied to the server outside of the connection.
n For server certificate files (when server authentication is required) this is not a problem unless
the client is expected to connect to multiple servers that are using different self signed
certificates or are using certificate chains that are signed by different root CA certificates. To
work around this you have to change the certificates before making the connection, or in the
case of API mode specify a different authentication profile.
Cipher suites
For the Telit LE866 cellular component:
n TLS_RSA_WITH_RC4_128_MD5
n TLS_RSA_WITH_RC4_128_SHA
n TLS_RSA_WITH_AES_128_CBC_SHA
n TLS_RSA_WITH_NULL_SHA
n TLS_RSA_WITH_AES_256_CBC_SHA
This list may be incomplete.

Digi XBee 3 Specifications

General

Model	XBee 3
Category	Modem
Frequency Bands	2.4 GHz, 868 MHz, 900 MHz
Interface	UART, SPI, I2C
Operating Temperature	-40° C to +85° C
Power Supply	2.1V to 3.6V
Antenna	External or onboard
Transmit Power	up to 20 dBm
Security	AES encryption
Protocols	Zigbee, 802.15.4, DigiMesh

Summary

Getting Started with the XBee Smart Modem

Connect Hardware and Install XCTU

Step-by-step instructions for connecting hardware and installing XCTU utility.

Update Firmware and Check Connection

Procedures for updating device firmware and verifying cellular connection status.

XBee Connection Examples

Getting Started with MicroPython

MicroPython Basics and Setup

Introduction to MicroPython and setting up the environment using XCTU.

MicroPython Examples

Update the Firmware

Plan for Firmware Updates

Update Device and Cellular Firmware

Procedures for updating device and cellular firmware using XCTU.

Update Telit Modem Firmware with XFP Utility

Instructions for updating the Telit modem firmware using the XFP utility.

AT Commands Reference

Special, Cellular, and Network Commands

Reference for special, cellular, and network configuration AT commands.

I/O, Sleep, and Mode Commands

Configuration commands for I/O settings, sleep modes, and operating modes.

File System, BLE, Socket, and API Commands

Commands for file system, BLE, sockets, and API frame management.

Troubleshooting Guide

Serial Port and Driver Issues

macOS Java Errors and Bypass Mode Issues

Network, SMS, and Baud Rate Troubleshooting