central encryption error (ble_app_hrs_c)

[lyrics]

Hi, I'm using nRF52832 Software Development Kit, PCA10040, S132.

I'm getting this error while trying to connect with my device in the "ble_app_hrs_c".

"Connection security failed: role: Central, conn_handle: 0x0, procedure: Encryption, error: 4102"

It can be seen in this section and recognized as a security error in the peer_manager section.

void pm_handler_pm_evt_log(pm_evt_t const * p_pm_evt)
{
    NRF_LOG_DEBUG("Event %s", m_event_str[p_pm_evt->evt_id]);

    switch (p_pm_evt->evt_id)
    {
        case PM_EVT_BONDED_PEER_CONNECTED:
            NRF_LOG_DEBUG("Previously bonded peer connected: role: %s, conn_handle: %d, peer_id: %d",
                          m_roles_str[ble_conn_state_role(p_pm_evt->conn_handle)],
                          p_pm_evt->conn_handle,
                          p_pm_evt->peer_id);
            break;

        ...

        case PM_EVT_CONN_SEC_FAILED:
            NRF_LOG_INFO("Connection security failed: role: %s, conn_handle: 0x%x, procedure: %s, error: %d",
                         m_roles_str[ble_conn_state_role(p_pm_evt->conn_handle)],
                         p_pm_evt->conn_handle,
                         m_sec_procedure_str[p_pm_evt->params.conn_sec_start.procedure],
                         p_pm_evt->params.conn_sec_failed.error);
            NRF_LOG_DEBUG("Error (decoded): %s",
                          sec_err_string_get(p_pm_evt->params.conn_sec_failed.error));
            break;
            
        ...
    }
}

What caused this error? How can I fix the error?

BR,

Lyrics

[Vidar Berg]

Hi,

The "4102" error corresponds to PM_CONN_SEC_ERROR_PIN_OR_KEY_MISSING and it indictates that the bonding information is deleted on the peripheral, but not on the central side. Can you try deleteing the bonding information on the central as well?

Best regards,

Vidar

[lyrics]

Thank you for your reply.

I succeeded in connecting using delete_bonds() as you helped me.

void scanning_start(bool * p_erase_bonds)
{
    // Start scanning for peripherals and initiate connection
    // with devices that advertise GATT Service UUID.
    if (*p_erase_bonds == true)
    {
        // Scan is started by the PM_EVT_PEERS_DELETE_SUCCEEDED event.
        delete_bonds();
    }
    else
    {
        delete_bonds();
        //scan_start();
    }
}

But it seems like I have to call that function every time to connect correctly. What is the reason?

[Vidar Berg]

I think you need to find out why the bonding information is not retained on the peripheral. To you have control over that implemenation? Is it a nRF device?

[lyrics]

Central is nRF device, and peripheral is my own device, not nRF device.

Vidar Berg said:

To you have control over that implemenation?

What is this mean?.. Control of my device is not possible. (I don't know if this is the right answer)

[Vidar Berg]

lyrics said:

What is this mean?.. Control of my device is not possible. (I don't know if this is the right answer)

 Since the peripheral appears to be loosing the bonding information after every connection, I was wondering if you had access to maybe fix that in the device's FW. But it sounds like the answer to that is no. Is it an option to not enable security like in the ble_app_uart_c example?

[lyrics]

I corrected the ble_app_hrs_c. (nrf52, s132)
I thought there was a security-related code in peer_manager_init(), but I don't know.

I'm sorry for the unhelpful reply.

[Vidar Berg]

Ok, so it is working now?

[lyrics]

yes, thank you for your help!