Manualshelf

User Manual

ManualsBrandsSensize ManualsElectronicsSensize Tracker v2 CAT-M
231232233234235236237238239240
Table Of Contents
SARA-R4 series-AT commands manual
UBX-17003787 - R16
20Device and data security
Page 234 of 401
20.3.1.4SARA-R410M-63B / SARA-R410M-73B / SARA-R410M-83B End-to-end data encryption and
decryption
The +USECE2EDATAENC, +USECE2EFILEENC AT commands allow encrypting data on a device and
decrypting asynchronously in the cloud independent of protocols (legacy, etc.), servers, platforms or time
before reaching the final destination.
20.3.2SSL/TLS certificates and private keys manager +USECMNG
+USECMNG
SARA-R410M SARA-R412MModules
SARA-N4
Syntax PIN required Settings saved Can be aborted Response time Error referenceAttributes
full No No No - +CME Error
20.3.2.1Description
Manages the X.509 certificates and private keys with the following functionalities:
• Import of certificates and private keys
• List and information retrieval of imported certificates and private keys
• Removal of certificates and private keys
• MD5 calculation of imported certificate or private key
The number and the format of the certificates and the private keys accepted depend on the module series:
• SARA-R4 / SARA-N4 - only certificates and private keys in DER (Distinguished Encoding Rules) format are
accepted. If the provided format is PEM, the imported certificate or private key will be invalid. Up to 16
certificates or private keys can be imported.
The certificates and private keys are kept in DER format and are not retrievable (i.e. cannot be downloaded
from the module); for data validation purposes an MD5 hash string of the stored certificate or private key
(stored in DER format) can be retrieved.
Data for certificate or private key import can be provided with a stream of byte similar to +UDWNFILE or
from a file stored on the FS.
When using the stream of byte import functionality:
• If the data transfer is stopped before its competition, a guard timer of 20 s will ensure the termination
of the data transmission. In this case the prompt will switch back in AT command mode and an error
result code will be returned.
• If the module shuts down during the data transfer, all the bytes are discarded.
• If any error occurs during the data transfer, all bytes are discarded.
All the imported certificates or private keys are listed if the type of the security data is omitted.
SARA-R4 / SARA-N4
The imported certificates and private keys are:
• NOT PERSISTED after the module FW is upgraded using EasyFlash.
The USECMNG import command supports only X.509 certificate format.
The X.509 certificate DN (Distinguished Name) is composed of value fields which uniquely define an entity
being authenticated. For security reasons some limitations (related to DN fields) described below are
applied:
• The USECMNG import functionality allows the following DN value fields:
o commonName (http://oid-info.com/get/2.5.4.3)
o serialNumber (http://oid-info.com/get/2.5.4.5)
o countryName (http://oid-info.com/get/2.5.4.6)
o localityName (http://oid-info.com/get/2.5.4.7)
o stateOrProvinceName (http://oid-info.com/get/2.5.4.8)
o organizationName (http://oid-info.com/get/2.5.4.10)
o organizationalUnitName (http://oid-info.com/get/2.5.4.11)
o userID (http://oid-info.com/get/0.9.2342.19200300.100.1.1)
o domainComponent (http://oid-info.com/get/0.9.2342.19200300.100.1.25)