For more information on Bluetooth security, refer to chapter 3 of the
Guide to Bluetooth Security.
All options use Security Mode 4 with FIPS-approved AES-Counter with CBC-MAC (AES-CCM) encryption. They differ in the generated key types and the use of man-in-the-middle protection.
Easy Bluetooth Security (default): The easy security setting is designed for ease of connection with most devices and minimal user interaction. Uses “Just Works” secure and simple pairing method with no man in the middle protection. Provides level 2 security (as per “Guide to Bluetooth Security”)
Medium Bluetooth Security: The medium security setting requires a passkey for the initial connection to pair scanner to remote host. Uses “Passkey Entry” secure and simple pairing method with man in the middle protection. Provides level 3 security (as per “Guide to Bluetooth Security”).
High Bluetooth Security: The high security setting requires “Secure Connections” between scanner and remote host. Scanning in of a passkey is required. Provides level 4 security (as per “Guide to Bluetooth Security”).
For higher security levels, place the scanner in the cradle for an initial pairing to exchange OOB data.
The scanner may fall back to a lower security mode when it connects to a legacy device. Setting the security mode to high prevents this behavior.
