DIGI TRUSTFENCE SECURE BY DEFAULT

DIGI TRUSTFENCE® SECURE BY DEFAULT SECURE BOOT ENCRYPTED STORAGE TRUSTFENCE® PROTECTED PORTS CONFIGURATION BEST PRACTICES & MONITORING Digi offers the industry’s only built-in device security framework for the Digi TransPort LR54 router. Enterprise LTE networking – built secure from the ground up Security is a critical concern for engineers and architects Digi TrustFence provides a tested and documented designing networks to support the growing number of security framework designed to minimize or eliminate connected IoT devices. Evolving technology and the threat vectors. With an LTE platform designed for sheer scale of connected devices expose operators security from the start, you have the assurance that to significant new security risks and engineering remote network equipment will be a security asset, not a challenges. Worrying about the vulnerability of remote security liability. or customer-premise LTE equipment shouldn’t be one of those challenges. www.digi.com

Rely on Digi TrustFence to keep remote TransPort LTE equipment secure and up-to-date. Digi TrustFence is the security framework for the Digi TransPort® LR series of M2M routers. The TrustFence framework requires security to be designed in at the ground floor, resulting in a new security orientation for Digi TransPort LR devices. The built-in security of Digi TrustFence gives you secure connections, authenticated boot, encrypted data storage, secure software updates, and excludes all insecure ingress protocols. GROWING CONNECTIVITY AND CONCERN FOR DEVICE SECURITY Non-consumer sectors will account for the majority of connected devices by 2025. 70% 50 World market for Communications Fixed40 internet-connecteddevices; installed base Communications Mobile 30 and new shipments Computers of IoT devices are Consumer20 vulnerable to attack Industrial 10 Military & Aerospace Source: HP Security Research Source: IHS, 2014 0 2011 2012 2013 2016 2017 2022 2025 Digi TrustFence delivers built-in security with a full range of features including: 3 Secure Boot Secure Boot is a set of capabilities around authentication that ensure only authorized users can access a device and only certified code can run on a device. Key elements of Secure Boot are: No Default Password – Prevent hackers from guessing an administrator password to the device. Authenticated Firmware Upgrade – Only allow firmware that has been authored by the manufacturer. External Authentication and Device Identity Management – With certificate management and secure key storage each device can be authenticated before it joins your network. This allows centralized management of users. This also allows password policies, which can become very complex to be managed separate from the device. 3 Encrypted Storage Local file system encryption keeps internal data safe. Digi’s cryptographically secure pseudo-random number generator (CSPRNG) is dedicated hardware for random source generator that is unpredictable, which is a requirement for all security operations. 3 Protected Ports All internal and external I/O ports are hardened and access controlled to prevent unwanted local intrusion. Digi ensures all ingress and egress protocols are secure and the JTAG port is secured. 3 Configuration Best Practices and Monitoring Good security requires people, process and technology. Digi delivers end-user guidelines to properly secure a device and have confidence that it stays secure. Our guidelines include hardening documentation and policy guidelines along with on-going monitoring, alerts and notifications. For more information about Digi TrustFence, visit www.digi.com/security www.digi.com 877-912-3444 I 952-912-3444 91003526 © 1996-2017 Digi International Inc. All rights reserved. All other trademarks are the property of their respective owners. A2/817