SENA ProBee-ZE20S-SEME - Manual (Page 27)

ProBee-ZE20S-SExx User Guide Rev 1.8 27
use the key, but simply store it. Later, a key switch is broadcast by the trust center to tell all nodes to start
using the new key. At a minimum, the trust center should allow adequate time for the broadcast of the
new key to propagate throughout the network before switching.
AT+UPDATEKEY<CR> or AT+UK<CR>
3.2 Configuring CBKE Data Token
Generated link key is required to support Smart Energy security, which is based on CBKE using Elliptic-
Curve Cryptography (ECC). To generate valid link key, you should obtain correct certificate (Implicit Cert,
Public Key, and Device Private Key) and input that to CBKE Data Token in ZE20S node. Here is the
method for obtaining test certificate. You can get test certificates by following step:
1. Register for an account (for test certificate generation) at:
http://www.certicom.com/index.php/gencertregister .
This registration is valid for a limited time.
2. Log in to the test certificate generation site with your account login at:
http://www.certicom.com/index.php/devicelogin .
3. Go to the certificate generation page:
http://www.certicom.com/index.php/smartenergydevicecertificateservice .
4. In the Subject ID field, enter the MAC address (long address) of the target device where the certificate
will reside (MSB order, such as 000195...). This should be same as your target node's MAC address, but
if the address differs, the target device will not work as Smart Energy node. You can get the MAC address
of your ZE20S node by AT+LONGADDR.
Example)
AT+LONGADDR<CR> # Get MAC address (long address) of current node.
000195AABBCC0003<CR> # Input this value to subject ID field.
OK<CR> # Response
5. In the Profile Attribute Data field, enter any custom hexadecimal you want associated with this device.
(The recommended format is profile ID [0109] + cert type [1 for test] + 16-bit ZigBee Manufacturer Code +
15-byte optional customer data)
Example)
0109108301234567890A