peer_manager_handler: Connection security failed: role: Central, conn_handle: 0x0, procedure: Bonding, error: 1

[Sreejith Sundh]

Hi,

As I have developed the peripheral device (nRF52840) with custom services and trying to validate the connection by programming its central device using nRF52840DK. The peripheral programmed with security 128 Bit OOB Key. Which I have set on both peripheral and central device while programming. I used following setup on both device,

#define SEC_PARAM_BOND                       1                                                                                                   /**< Perform bonding. */
#define SEC_PARAM_MITM                        1                                                                                                    /**< Man In The Middle protection not required. */
#define SEC_PARAM_LESC                        0                                                                                                   /**< LE Secure Connections not enabled. */
#define SEC_PARAM_KEYPRESS              0                                                                                        /**< Keypress notifications not enabled. */
#define SEC_PARAM_IO_CAPABILITIES    BLE_GAP_IO_CAPS_NONE                                 /**< No I/O capabilities. */
#define SEC_PARAM_OOB                          1                                                                                                   /**< Out Of Band data not available. */
#define SEC_PARAM_MIN_KEY_SIZE        7                                                                                 /**< Minimum encryption key size. */
#define SEC_PARAM_MAX_KEY_SIZE       16                                                                              /**< Maximum encryption key size. */

I followed the Heart rate example to programm the central device. But my central device not connecting with the peripheral,shows the following error,

<info> app: BLE_GAP_EVT_AUTH_KEY_REQUEST
<info> peer_manager_handler: Event is PM_EVT_CONN_SEC_FAILED
<info> peer_manager_handler: Connection security failed: role: Central, conn_handle: 0x0, procedure: Bonding, error: 1
<info> app: BLE_GAP_EVT_AUTH_STATUS: status=0x1 bond=0x0 lv4: 0 kdist_own:0x0 kdist_peer:0x0

What would be the cause, I am not familiar with 'error 1'. Can someone help here.

Thanks in advance.

with Regards,

Sreejith

[Hung Bui]

Hi Sreejith, 
Could you show how you handle OOB data ? How do you set the data on both the central and the peripheral ?  Do you have any OOB mechanism to send the TK between the peer ? 
Have you looked at the \examples\ble_peripheral\experimental\ble_app_hrs_nfc_pairing example ? 
The error 1 was most likely BLE_GAP_SEC_STATUS_TIMEOUT. 
If you can capture a sniffer trace, it's easier to tell what was wrong. 

[Sreejith Sundh]

Hi Hung,

Thanks for your response. I refered OOB works with MCP but fails with nRF Connect - Nordic Q&A - Nordic DevZone - Nordic DevZone (nordicsemi.com) this HRS and HRS_C Example for my application and central device except the setting of LESC, I do not want to use it. I am not sending TK, instead as in the example I am saving it in both central and peripheral device.

As I have checked without OOB (only bond, no MITM, no OOB), eventhough my central device not connection (same error). 

Thanks and Regards,

Sreejith 

[Hung Bui]

Hi Sreejith, 
If you want to use OOB, please take a look at the ble_app_hrs_nfc example. 
Regarding the issue with pairing, if you try the HRS and HRS_C out of the box with no modification , would they work ? 

If you have an extra DK, I would strongly suggest to capture a sniffer trace. 

[Sreejith Sundh]

Hi Hung,

Hung Bui said:

If you want to use OOB, please take a look at the ble_app_hrs_nfc example. 
Regarding the issue with pairing, if you try the HRS and HRS_C out of the box with no modification , would they work ? 

Yes when I replaced with HRS, HRS_C example it works correctly.

I do not have an extra DK, Is it possible with one DK and one Dongle?

Thanks and Regards,

Sreejith

[Hung Bui]

Hi Sreejith, 
I don't think using a dongle is a good idea. It's not a development board. It can not erase bond information so it will be extremely difficult to test bonding. 

Please try to get hold of an extra DK for testing. You can use the dongle as the sniffer.