Hesai Pandar128E3X, User Manual

Page: 72 / 124

- 70 -
4.11.2 mTLS (Optional)
The LiDAR is in TLS ( one-way auth ) mode by default. mTLS (two-way auth) is recommended to enhance security:
· See Section 4.2 (Web Control - Settings) for uploading the user certificate.
· Before checking live point cloud data in PandarView, upload both the user certificate and the corresponding private key. See Section 5.2
(PandarView - Check Live Data).
Requirements for the user certificate (chain):
File Size Within 10 KB
Certificate Version X.509 v3
Depth of Chain Unlimited
Validity Period The LiDAR can only retrieve the current time by connecting to an external clock source (GPS/PTP). Without an external
source, the LiDAR's system time does not reflect the current time.
To make sure your user certificate is always valid (with or without an external clock source),
· the start date of the validity period should be 2019-01-01 or an earlier date
· the expiry date should be later than the current date
Extensions
If certificate extensions are used:
· Include a user_cert extension
· Include "TLS Web Client Authentication" in the "X509v3 Extended Key Usage" field
In mTLS mode,
· users can reset the password by sending the PTCS command
PTC_COMMAND_SET_WEB_LOGIN_PASSWD
, see Chapter 6 (Communication
Protocol).
· when the LiDAR connects to a new PC, users need to login again and upload the user certificate for the new PC.
· in case the private key to the user certificate is forgotten, login and upload a new user certificate.
NOTE Before shipping loaned LiDARs or LiDARs under RMA, make sure to remove the uploaded user certificate by clicking the "Clean" button
on the Settings page of web control.