Campbell Scientific CR800 and CR850 Measurement and Control Systems - Manual (Page 346)

Section 8. Operation
346
As shown in figure LoggerNet Device-Map Setup: Dataloggers
(p. 345),
set the
PakBus® address for each CR800 as listed in table PakBus-LAN Example
Datalogger-Communications Settings
(p. 344).
8.5.7 PakBus Encryption
PakBus encryption allows two end devices to exchange encrypted commands and
data. Routers and other leaf nodes do not need to be set for encryption. The
CR800 has a setting accessed through DevConfig that sets it to send / receive only
encrypted commands and data. LoggerNet, likewise, has a setting attached to the
specific station that enables it to send and receive only encrypted commands and
data. Header level information needed for routing is not encrypted. Encryption
uses the AES-128 algorithm.
Campbell Scientific products supporting PakBus encryption include the
following:
• LoggerNet 4.2
• CR1000 datalogger (OS26 and newer)
• CR3000 datalogger (OS26 and newer)
• CR800 series dataloggers (OS26 and newer)
• Device Configuration Utility (DevConfig) v. 2.04 and newer
• Network Planner v. 1.6 and newer.
Portions of the protocol to which PakBus encryption is applied include:
• All BMP5 messages
• All settings related messages
Note Basic PakCtrl messages such as Hello, Hello Request, Send Neighbors,
Get Neighbors, and Echo are NOT encrypted.
The PakBus encryption key can be set in the CR800 datalogger through:
• DevConfig Deployment tab
• DevConfig Settings Editor tab
• PakBusGraph settings editor dialogue
• CR1000KD keyboard display. The keyboard is the only way to clear the key
if the key is forgotten. The datalogger should be kept in a secure location to
prevent keypad access.
Note Encryption key cannot be set through the CRBasic datalogger program.
Setting the encryption key in datalogger support software (LoggerNet 4.2 and
higher):
• Applies to CR1000, CR3000, CR800 series dataloggers, and PakBus routers,
and PakBus port device types.
• Can be set through the LoggerNet Set Up screen, Network Planner, or
CoraScript (only CoraScript can set the setting for a PakBus port).