# December 6, 2023 - X.509 security mode support

**URL:** <https://community.cumulocity.com/t/december-6-2023-x-509-security-mode-support/11749>\
**Category:** Device Management & connectivity\
**Tags:** Feature, device-management, lwm2m, device-connectivity\
**Created:** [March 17, 2025, 8:46am UTC](https://community.cumulocity.com/t/december-6-2023-x-509-security-mode-support/11749 "2025-03-17T08:46:58Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/flex005/user_avatar/community.cumulocity.com/system/32/31990_2.png) [@system](https://community.cumulocity.com/u/system)\
**Post date:** [March 17, 2025, 8:46am UTC](https://community.cumulocity.com/t/december-6-2023-x-509-security-mode-support/11749/1 "2025-03-17T08:46:58Z")

</div>

## Context

* * *

**Change Type:** Feature  
**Product area:** Device management & connectivity  
**Component:** LWM2M  
**Deployed at:** [eu.latest.cumulocity.com](http://eu.latest.cumulocity.com), [apj.cumulocity.com](http://apj.cumulocity.com), [jp.cumulocity.com](http://jp.cumulocity.com), [cumulocity.com](http://cumulocity.com), [us.cumulocity.com](http://us.cumulocity.com)

> **Technical details**
>
> **Build artifact:** cumulocity (10.18.288.0)  
> **Internal ID:** DM-554

## Description

* * *

LWM2M device connections with X.509 certificates are now supported.  
The X.509 security mode can be selected separately for the Bootstrap server and the LWM2M server either during device registration or, for existing devices, by using the new **LWM2M configuration** tab.  
The Certificate Authority that issued device certificates must be added and enabled in the [trusted certificates](https://cumulocity.com/docs/device-certificate-authentication/managing-trusted-certificates/) in the tenant.

Together with this change also the following changes are introduced:

##### Separate security mode for Bootstrap and LWM2M server

Now all LWM2M device security modes can be selected separately for Bootstrap server and LWM2M server connections. This can be defined either during the device registration or using the **LWM2M configuration** tab of the device.

##### Disable authentication for Bootstrap or LWM2M server

Under **Connectivity** in the **LWM2M configuration** tab, the Bootstrap or LWM2M server connection can be disabled for a device.

##### PSK-generated option for LWM2M server security mode

During device registration, the “PSK generated” option can be selected for LWM2M Server connection to make LWM2M agent to generate the PSK ID and PSK key credentials for the device. These will be set to the device during the bootstrap process.  
For details, refer to the [LWM2M](https://cumulocity.com/docs/device-integration/lwm2m/) user documentation.