CC1312R7: Wi-SUN Certificates

Tomás Verdú

Prodigy 20 points

Part Number: CC1312R7

Hello TI Team,

we are working on Wi-Sun networks and we have some questions about security and certificates.

We know Wi-Sun uses certificates to validate if a node can join the BR network or not.

We tried to create our own certificates but it didn´t work. The node couldn't join the network.

These certificates are setted by default, can they be modified?

Can we generate our own certificates? In which case, HOW can we generate them?

Best regards,

Tomás.

over 3 years ago

0 Sid over 3 years ago

TI__Mastermind 20407 points

Hi Tomás,

The stack users guide provides a way to modify the default certificates.

https://dev.ti.com/tirex/content/simplelink_cc13xx_cc26xx_sdk_6_10_00_29/docs/ti_wisunfan/html/wisun-stack/networklayer.html#certificates-for-certification

More on Wi-SUN certification can be found in the Wi-SUN alliance page.
https://wi-sun.org/certification-3/

Regards,

Sid

0 Facundo Andrioli Villa over 3 years ago in reply to Sid

Prodigy 20 points

Hi Siddanth_N!

We have modified the default certificates and it didn't work!

We have created our own certificates with openSSL and XCA and the boards did not connect

We have used Silicon Labs certificates on the boards and it worked!

From what we assume, we are creating the certificates wrong and we don't know what we are doing wrong.

My questions are:
1- Is there any special tool to create these certificates?
2-How are these default certificates modified? because we have modified it respecting the format that they have to have and they do not connect
3- How did you create the default certificates?
4- Did you do any test modifying the default certificates?

Regards

Facundo.

0 Sid over 3 years ago in reply to Facundo Andrioli Villa

TI__Mastermind 20407 points

Hi Facundo,

The security certificate generation process is something the Wi-SUN alliance describes and the process of generating the certificates is described in this video https://www.youtube.com/watch?v=5rAEnLV_qHE From 28:40 onwards.

You would need a certificate authority to be a part of certification generation.

Regards,

Sid

Sub-1 GHz

Sub-1 GHz forum

CC1312R7: Wi-SUN Certificates