
Transport Layer Security (TLS)
Transparent mode and TLS
Digi XBee3 Cellular LTE-M/NB-IoT Global Smart Modem User Guide
153
1. No authentication: None of the parameters are provided, this is the default value. With this
configuration identity is not validated and a man in the middle (MITM) attack is possible.
2. Server authentication: Only
ca_cert
is provided. Only the servers identity is checked
3. Mutual authentication: All items are provided and both sides are assured of the identity of their
peer
It is not possible to only have client authentication.
Transparent mode and TLS
Transparent mode connections made when
=
4
(TLS) are made using the configuration
specified by
Note
For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.
API mode and TLS
On the
Transmit (TX) Request: IPv4 - 0x20
frame, when you specify protocol
4
(TLS), the profile
configuration specified by
is used to form the TLS connection.
lets you choose the IP setting for the serial data.
Note
For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.
Key formats
The RSA PKCS#1 format is the only common format across XBee Cellular device variants. You can
identify a PKCS#1 key file by the presence of
BEGIN RSA PRIVATE KEY
in the file header.
Digi's implementation does not support encrypted keys, we use file system encryption to protect the
keys at rest in the system.
Note
For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.
Certificate formats
For SARA-R410 cellular components used in the XBee3 Cellular LTE-M Global Smart Modem, if the
server certificate has a Common Name (CN) that is greater than 31 characters the SSL connection
fails.
Note
For NB-IoT, TCP support is dependent on the network. Contact your network provider for
details.
Certificate limitations
The XBee Smart Modem only supports certificate files that contain a single certificate in them.