CR1000 Manual - Campbell Scientific

Section 8. Operation
8.5.7 PakBus Encryption
As shown in figure LoggerNet Device-Map Setup: Dataloggers (p. 362), set the
PakBus® address for each CR1000 as listed in table PakBus-LAN Example
Datalogger-Communications Settings (p. 360).
PakBus encryption allows two end devices to exchange encrypted commands and
data. Routers and other leaf nodes do not need to be set for encryption. The
CR1000 has a setting accessed through DevConfig that sets it to send / receive
only encrypted commands and data. LoggerNet, likewise, has a setting attached
to the specific station that enables it to send and receive only encrypted
commands and data. Header level information needed for routing is not
encrypted. Encryption uses the AES-128 algorithm.
Campbell Scientific products supporting PakBus encryption include the
following:
• LoggerNet 4.2
• CR1000 datalogger (OS26 and newer)
• CR3000 datalogger (OS26 and newer)
• CR800 series dataloggers (OS26 and newer)
• Device Configuration Utility (DevConfig) v. 2.04 and newer
• Network Planner v. 1.6 and newer.
Portions of the protocol to which PakBus encryption is applied include:
• All BMP5 messages
• All settings related messages
Note Basic PakCtrl messages such as Hello, Hello Request, Send Neighbors,
Get Neighbors, and Echo are NOT encrypted.
The PakBus encryption key can be set in the CR1000 datalogger through:
• DevConfig Deployment tab
• DevConfig Settings Editor tab
• PakBusGraph settings editor dialogue
• CR1000KD keyboard display. The keyboard is the only way to clear the key
if the key is forgotten. The datalogger should be kept in a secure location to
prevent keypad access.
Note Encryption key cannot be set through the CRBasic datalogger program.
Setting the encryption key in datalogger support software (LoggerNet 4.2 and
higher):
• Applies to CR1000, CR3000, CR800 series dataloggers, and PakBus routers,
and PakBus port device types.
• Can be set through the LoggerNet Set Up screen, Network Planner, or
CoraScript (only CoraScript can set the setting for a PakBus port).
363