Secure setting issue with New Z-Stack Linux Gateway

TI Z-Stack Linux Gateway is built for HA profile which enable security and use TC_LINK_KEY. If you disable the security or change it on ZED, it won't join Zigbee network of TI Z-Stack Linux Gateway.

Hi YiKai,

Thanks for reply.

What if ZED is stil built with "SECURE=1", I only changed the DEFAULT_KEY value in f8wConfig.cfg, the binding works fine too.  In fact, I expected the binding can not be successful when I changed the default key on ZED.

What is the default key for TI Z-Stack Linux Gateway project ?

Thanks !!!

The default key is {0x5A, 0x69, 0x67, 0x42, 0x65, 0x65, 0x41, 0x6C, 0x6C, 0x69, 0x61, 0x6E, 0x63, 0x65, 0x30, 0x39} for HA profile.

Hi YiKai,

Thanks and I think the default key you mentioned here is "DEFAULT_TC_LINK_KEY" defined in nwk_globals.h.

I tried to change "DEFAULT_TC_LINK_KEY" of ZED, but why is binding still successfully when CC2531 ZNP ZC has its default key, {0x5A, 0x69, 0x67, 0x42, 0x65, 0x65, 0x41, 0x6C, 0x6C, 0x69, 0x61, 0x6E, 0x63, 0x65, 0x30, 0x39} and ZED with {0xFA, 0xF9, 0xF7, 0x42, 0x65, 0x65, 0x41, 0x6C, 0x6C, 0x69, 0x61, 0x6E, 0x63, 0x65, 0x30, 0x39} ?

Please help and thanks a lot.

ps. I did erase the flash of ZED whenever I changed the key of ZED.

You should change default key in f8wconfig.cfg.

Hi YiKai,

Thanks for your reply, but after verifying SampleSwitch and SampleLight project with all kinds of secure setting combinations. Actually, the issue is from the image of CC2531ZNP Prod project and prebuilt image, CC2531-GW-ZNP_38724.hex in the Linux Gateway project.

When I enable security function on ZED, with CC2531-Prod.hex or CC2531-GW-ZNP_38724.hex, the ZC would bind ZED successfully, no matter if ZED has a different default key or link key from ZC key.

Once ZED is built with SECURE=1, CC2531 ZC will accept the binding requirement from ZED.

But, the same tests performed with SampleSwitch and SampleLight project, the CC2538 ZC will reject ZED binding requirement when ZED has different key from ZC key.

The CC2531 test is performed on Z-Stack Home 1.2.1 version.

Please help and thanks a lot.

Hi YiKai,

Sorry, I would like to attach the flash of CC2531 Dongle for your information, because somehow I wonder if any unwanted information does not erase in the flash with TI flash programmer so that the result I got is very strange.

Thanks.

I suggest you using Ubiqua Packet Analyzer to see what happens over the air.

Hi Ting,

You can complie Z-Stack Home 1.2.1 ZNP and use it with the gateway. The procedures are as following.

- Install Z-Stack Home 1.2.1
- Open znp.eww using IAR (8051). Define compiler option ENABLE_MT_SYS_RESET_SHUTDOWN for IAR Project CC2531-ProdSBL.
- Compile. Output: C:\Texas Instruments\Z-Stack Home 1.2.1\Projects\zstack\ZNP\CC253x\dev\CC2531ZNP-Prod.bin
- Using TFTP/SCP, to transfer CC2531ZNP-Prod.bin to BeagleBone Black board
- Using sbl_tool.bin update ZNP:
   >./sbl_tool.bin CC2531ZNP-Prod.bin usb (detailed instructions in Gateway user's guide/addendum)

- Cetri

Hi Cetri,

Thanks for replying and giving instrctions of building ZNP with the gateway. Unfortunately, the result is the same as using prebuilt ZNP image with the gateway.

Besides, we need to control many unsecured ZED devices now, so I built unsecured ZNP with gateway, but it can not even bind unsecured sample light ZED successfully.

I attached the image I built and could you please help to verify if you have the same result as mine ?

Really appreciate it very much

!8468.CC2531ZNP-Prod.hex.zip

Hi Cetri,

I totally understand the reason of NWK security needed for the GW project. Could you please share with me how GW project to stop the binding between unsecured ZNP and ZED ?

Another issue needs your help is that in secure mode, the change of keys can not stop the successful binding between CC2531 ZNP and CC2538 sample light ZED. I tried the prebuilt images under Z-Stack Home 1.2.1/Projects/zstack/ZAP/ZNP-HexFiles/CC2531NP-Pro-Secure_LinkKeyJoin.hex (or CC2531NP-Pro-Secure_Standard.hex or CC2531NP-Pro.hex ), but the result is still the same.

Moreover, when zgPreConfigKeys is set to TRUE in zglobals.c, then even the keys in ZNP and ZED are the same, but the binding is never successful.

The conclusion is that in GW project, the successful binding depends on zgPreConfigKeys, not the keys in ZNP and ZED.

Please help me on this and thank you very much !!

Ting