User Manual

SARA-R4 series-AT commands manual
UBX-17003787 - R16

20Device and data security
Page 238 of 401
<op_code>
Certificate validation level Minimum SSL/TLS/DTLS version Cipher suite Trusted root certificate internal name Expected server hostname Password for the client private key Pre-shared key used for connection SNI PSK key and PSK key identity generated by RoT Server certificate pinning TLS session resumption
0 1 2 3 4 7 8, 9 10 11 12 13
SARA-R410M-02B / SARA-R410M-52B /
SARA-R412M
* * * * * * * *
7
SARA-R410M-01B * * * * * * *
SARA-N4 * * * * * * *
Table 21: SSL/TLS connections properties applicability
To set all the parameters in security profile, a set command for each <op_code> needs to be issued (e.g.
certificate validation level, minimum SSL/TLS/DTLS version, ...).
To reset (set to factory-programmed value) all the parameters of a specific security profile, issue the AT
+USECPRF=<profile_id> command.
20.3.3.2Syntax
Type Syntax Response Example
Generic syntax
Set AT+USECPRF=<profile_id>[,<op_
code>[,<param_val1>[,<param_
val2>[,<param_val3>]]]]
OK AT+USECPRF=0,0,0
OK
Read AT+USECPRF=<profile_id>,<op_
code>
+USECPRF: <profile_id>,<op_code>,
<param_val1>
OK
AT+USECPRF=0,0
+USECPRF: 0,0,0
OK
URC +UUSECPRF: <profile_id>,<op_
code>[,<param_val1>[,<param_
val2>[,<param_val3>]]]
OK
+USECPRF: 0,13,1,0
OK
Cipher suite selection using IANA enumeration
Set AT+USECPRF=<profile_id>,2,99,
<byte_1>,<byte_2>
OK AT+USECPRF=0,2,99,"C0","2B"
OK
Pre-shared key configuration
Set AT+USECPRF=<profile_id>,8,
<preshared_key>[,<string_type>]
OK AT+USECPRF=0,8,"0sFpZ0AZqE0
N6Ti9s0qt40ZP5Eqx"
OK
Pre-shared key identity configuration
Set AT+USECPRF=<profile_id>,9,
<preshared_key_id>[,<string_type>]
OK AT+USECPRF=0,9,"0ceEZ0AZqP0
K60i9o04xz0ZP8zyu0Eqx"
OK
Server certificate pinning
7
Not supported by SARA-R410M-02B-00, SARA-R410M-02B-01, SARA-R410M-52B-00, SARA-R410M-
52B-01 and SARA-R412M-02B-00