← Back to live traffic

Keys for DTLS and TLS

To send encrypted messages, your device and the server need the same pre-shared key (PSK). Your device sends its identity in the handshake, the server looks up the key for it. Use DTLS 1.2 on UDP port 41300 or TLS 1.2 on TCP port 12400 of 164.30.75.205. See the docs for the device settings.

The keys also work for LwM2M with DTLS on UDP ports 15684 (server) and 5784 (bootstrap): there the identity must be the endpoint name of the device, e.g. urn:imei:351234567890123.

A key is deleted 90 days after it was last used.

Generate a key

The server creates a random key. You can download identity and key as a device key file.

Use your own key

The identity must not be in use yet.

Keys in operation

The identity and a short fingerprint of each key, so you can check which key your device has. The keys themselves are never shown here.

IdentityKeyFingerprint TypeCreatedLast usedExpiresHandshakes
dk-cellular-test 128 bit 648edada user 2026-10-04 2026-10-05 16:06 UTC 2027-01-03 19 ok / 0 failed
ict-gtktak 128 bit 6974b2ec user 2026-10-04 never 2027-01-02 0 ok / 0 failed
ict-hp4jhm 128 bit 9f20302e user 2026-10-04 2026-10-04 17:46 UTC 2027-01-02 8 ok / 4 failed
urn:imei:359404230038656 256 bit 42486dd6 user 2026-10-06 never 2027-01-04 0 ok / 0 failed
urn:imei:359404235389831 128 bit 189aa388 user 2026-10-05 2026-10-06 13:48 UTC 2027-01-04 59 ok / 0 failed