EN.
13
7. Z-Wave™ Security 2 and Device Specific Key (DSK)
The Device supports the latest Security 2 (S2) feature. S2 is handled by the strong AES 128
Encryption protocol, which means that the S2 makes Z-Wave™ the most secure IoT (Internet of
Things) security platform out there. To fully utilize the product and its Security 2 feature, a
Security 2-enabled Z-Wave™ gateway must be used.
Authenticated Control
· Out-Of-Band DSK for adding (inclusion)
· May be used by most implementations
The Device also supports Security 2 Authenticated, Unauthenticated, and Unsecure adding
(inclusion).
Note! When adding the Device to a Z-Wave network with a gateway supporting Security 2 (S2),
the PIN Code of the Z-Wave Device Specific Key (DSK) is required. You can find it on the label on
the side of the Device and a copy is inserted in the packaging, which must not be lost. Do not
remove the Z-Wave DSK label from the Device. As a backup measure, use the label in the
packaging.
The first five digits of the key are highlighted or underlined to help the user identify the PIN
Code part of the DSK text. The DSK is additionally represented with a QR Code as shown on the
image.
Z-Wave DSK label and QR code (example)
A joining node requesting to join the S2 Access Control Class or the S2 Authenticated Class will
obfuscate its Public Key by setting the bytes 1..2 to zeros (0x00) before transferring its key via
RF.
The DSK may be used for out-of-band (OOB) authentication.
The including gateway may use a QR code scanning device to read the entire DSK of the joining
device and match it with the obfuscated public key received via RF from the joining device.
To Next Page
Loading...
Need help?
General
