# TLS 1.2 setup on XBEE 3 NB-IoT/LTE cellular radio **URL:** \ **Category:** XBee - Cellular\ **Tags:** xbee3\ **Created:** [August 29, 2025, 10:17pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790 "2025-08-29T22:17:00Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![AthenaIndustrial](https://avatars.discourse-cdn.com/v4/letter/a/b38774/32.png) [@AthenaIndustrial](https://forums.digi.com/u/AthenaIndustrial)\ **Post date:** [August 29, 2025, 10:17pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/1 "2025-08-29T22:17:00Z")
We have a number of radios running in the field and lab that are working making MQTT connection to an Azure IoT Hub. Azure now requires us to have a minimum TLS of 1.2 where it was previously 1.0 I updated the Azure IoT Hub to only accept connections from TLS 1.2 and my devices could no longer connect. I would get the credential error returned during the connect process. What do I need to confiigure to get these to connect under the new TLS rules? Thank you for any help! ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [September 2, 2025, 11:37am UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/2 "2025-09-02T11:37:02Z")
What is the exact Digi XBee part number and firmware version you are working with? ---
**Author:** ![AthenaIndustrial](https://avatars.discourse-cdn.com/v4/letter/a/b38774/32.png) [@AthenaIndustrial](https://forums.digi.com/u/AthenaIndustrial)\ **Post date:** [September 2, 2025, 2:35pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/3 "2025-09-02T14:35:49Z")
The part number is for Digi XBee 3 Global LTE-M/NB-IoT The Firmware running on it is 11720 (FW ver 11720 Prod Bootloader: 232 Build: Nov 21 2024 14:21:51) Support said that these run at TLS 1.2 and should be fine. The issue is that when I modify the Azure IoT Hub to have a minimum requirement of TLS 1.2 the radios stop being able to connect, a credential error occurs. ![](https://us1.discourse-cdn.com/flex016/uploads/digi/original/2X/5/56b58fbec13f5b3e94924c41b42a90fd9bab771a.png) Rob ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [September 2, 2025, 2:56pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/4 "2025-09-02T14:56:23Z")
Are you sure that you do not need to use a Certificate with Azure? I am asking as you do not appear to be providing one and I believe that you do need to. ---
**Author:** ![AthenaIndustrial](https://avatars.discourse-cdn.com/v4/letter/a/b38774/32.png) [@AthenaIndustrial](https://forums.digi.com/u/AthenaIndustrial)\ **Post date:** [September 2, 2025, 3:10pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/5 "2025-09-02T15:10:39Z")
I am finding from my readings that that seems to be the correct path, although it was not implemented when we did the development with your team. Maybe it was not needed a few years back. I would be looking for any tutorials or some guidance on how to set this up with our custom micropython we developed, anything you have would be helpful Thanks Rob ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [September 2, 2025, 3:22pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/6 "2025-09-02T15:22:24Z")
I would suggest looking at [Digi MicroPython Programming Guide](https://docs.digi.com/resources/documentation/digidocs/90002219/#container/cont_aws.htm?Highlight=AWS) While this example was written for AWS, the process for loading certificates and any changes in a Micro Python application should be similar. ---
**Author:** ![AthenaIndustrial](https://avatars.discourse-cdn.com/v4/letter/a/b38774/32.png) [@AthenaIndustrial](https://forums.digi.com/u/AthenaIndustrial)\ **Post date:** [September 2, 2025, 4:14pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/7 "2025-09-02T16:14:03Z")
Thank you, I will look at that Rob ---
**Author:** ![bBoyJeffe](https://avatars.discourse-cdn.com/v4/letter/b/b19c9b/32.png) [@bBoyJeffe](https://forums.digi.com/u/bBoyJeffe)\ **Post date:** [September 30, 2025, 12:57am UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/8 "2025-09-30T00:57:47Z")
Did you ever get this problem figured out. I am experiencing something similar. I have the DigiCertGlobalRootG2.pem loaded on my XBee and have checked my SAS token against a successful connection established on a PC using paho-mqtt instead of mqtt.simple. I am about to give up and shift to AWS using the guide linked to by mvut. ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [September 30, 2025, 11:31am UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/9 "2025-09-30T11:31:07Z")
bBoy which xbee module are you working with? ---
**Author:** ![bBoyJeffe](https://avatars.discourse-cdn.com/v4/letter/b/b19c9b/32.png) [@bBoyJeffe](https://forums.digi.com/u/bBoyJeffe)\ **Post date:** [September 30, 2025, 5:05pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/10 "2025-09-30T17:05:20Z")
**XBee® 3 Low-Power LTE-M/NB-IoT - Firmware 11620** ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [September 30, 2025, 5:26pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/11 "2025-09-30T17:26:27Z")
In this case, I would suggest you submit a case at [my.digi.com](http://my.digi.com). When doing so, make sure you provide a profile of the radios settings as well as where you obtained the certificate file from that you are using. ---
**Author:** ![AthenaIndustrial](https://avatars.discourse-cdn.com/v4/letter/a/b38774/32.png) [@AthenaIndustrial](https://forums.digi.com/u/AthenaIndustrial)\ **Post date:** [October 2, 2025, 7:52pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/12 "2025-10-02T19:52:16Z")
I am using the same XBEE device, it turns out the firmware does not support TLS 1.2 right now, had to go through some work with their engineering department to find that out. I think there is a future release that will fix this but no idea when it is planned. I’d reach out to their support team and mention that this is a known issue ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [October 3, 2025, 12:03pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/13 "2025-10-03T12:03:13Z")
@AthenaIndustrial in your case, it is not a TLS 1.2 issue so much as it has to with the type of certificates you are using that is not currently supported. ---
**Author:** ![AthenaIndustrial](https://avatars.discourse-cdn.com/v4/letter/a/b38774/32.png) [@AthenaIndustrial](https://forums.digi.com/u/AthenaIndustrial)\ **Post date:** [October 3, 2025, 8:02pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/14 "2025-10-03T20:02:01Z")
It didnt matter what certificates we used, the latest strong ciphers microsoft needs for TLS 1.2 connections to its IoT hubs are not supported on the XBEE radio fw, it was left out to not interfere with Power Saving Mode I was told ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [October 6, 2025, 10:59am UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/15 "2025-10-06T10:59:47Z")
I do not know who is telling you this as this is not what my understanding is. If I recall, your issue has to do with a specific type of certificate being used that is currently not supported in the version of the Telit code that comes on the module. There was an update provided to you that should address that issue. ---
**Author:** ![AthenaIndustrial](https://avatars.discourse-cdn.com/v4/letter/a/b38774/32.png) [@AthenaIndustrial](https://forums.digi.com/u/AthenaIndustrial)\ **Post date:** [October 16, 2025, 8:39pm UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/16 "2025-10-16T20:39:53Z")
You are 100% right, it is the cipher issue with the current version of the Telit FW that will not allow TLS 1.2 connections to our Azure IoT Hub. The issue I am having is trying to update the Telit FW to a version that has been given to us, XX6, which is on your public ftp support server. I am using the API Explorer in Remote Manager to send the fully formed request (base64 encoded etc). It reaches my radio but fails to update and gives no errors. Im trying to find out if the OTA has ever been successful doing this method or not. Apologies for the confusing thread, we have been trying many options to get past this issue ---
**Author:** ![mvut](https://sea2.discourse-cdn.com/flex016/user_avatar/forums.digi.com/mvut/32/31_2.png) [@mvut](https://forums.digi.com/u/mvut)\ **Post date:** [October 17, 2025, 10:48am UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/17 "2025-10-17T10:48:37Z")
We currently don’t offer Modem firmware updates via DRM for the XBee products. You need to use the tools provided from Telit for that. ---
**Author:** ![luna\_ball](https://avatars.discourse-cdn.com/v4/letter/l/958977/32.png) [@luna\_ball](https://forums.digi.com/u/luna_ball)\ **Post date:** [February 3, 2026, 7:42am UTC](https://forums.digi.com/t/tls-1-2-setup-on-xbee-3-nb-iot-lte-cellular-radio/37790/18 "2026-02-03T07:42:24Z")
Thank you for contributing