Commissioning

The PowerTag Link gateway uses an internal self-signed certificate by default.
During the commissioning phase, user intervention is not required when dealing with product certificate management.
User can configure the device to use the product certificate which is provided by the end-user.
User can delete a certificate which he uploads and he cannot delete a self certificate.

Certificate regeneration is automatic, and is activated in two cases:

When the certificate has expired or when imported certificate has been deleted.
During the deletion of the imported certificate.

The features of Imported Certificate Obligatory are:

File: PCKS12 (see following Note)
Encryption: RSA≥2048 bit or ECC≥256 bit
Signature: RSA256
Key Usages: Digital Signature and Key Encryption
Extended Key Usages: Server Authentication
Format: X509 v3

NOTE: For firmware versions lower than 002.002.002, .pfx or .p12 format is supported. For firmware versions 002.002.002 and above, only the .pem format is supported when importing a user-signed certificate. If you have the .pfx format, convert it to .pem (for example by using a tool such as OpenSSL) before importing it.

If a user-signed certificate has already been imported into the previous firmware version, it is automatically deleted when the firmware is updated and a self-signed certificate is generated. You are informed via a pop-up message.