Quick Start Guide

Table Of Contents
Quick Start Guide imagotag GmbH
Page 18 of 36
5 Setup Security
The security concept is based on individual registration codes for each label. Not only that the
new concept simplifies installations, it also provides stronger encryption and a secure key
exchange with individual communication key derived from a user defined network key.
5.1 General encryption features and how does it work
l Solid improved safety
l Encrypted data type AES128 (Advanced Encryption Standard)
l User defined 128 bit network key for each installation
l Key is distributed to labels automatically
The new system requires a user defined 128 bit network key for each installation. The key is
derived from a passphrase that is defined by the customer and stored in the ESLServer and used
by all access points connected to that server to encrypt data communication to the labels.
A per-label communication key is transmitted to the labels during the registration of them. Each
label is assigned an individual registration code (it combines label ID and PIN code and it’s an
alphanumeric case-sensitive code with 11 characters). The ESLServer will than automatically
start the key exchange with the label secured by the PIN extracted from the registration code.
5.2 Set the encryption key
First step is to set the parameter encryptionPassphrase“ under System Configuration (you can
choose the encryption Passphrase on your own).
FIGURE 1-16: Set encryption key
Note: Do not change encryption passphrase if labels are already connected and encrypted (if
you want to change the encryption passphrase you’ll first have to unlock all labels see
[Troubleshooting] on page 32).