FCC ID: 2AHCNLOCK175 Remote access device with wireless router

1 USER MANUAL TOSIBOX Lock 100 TOSIBOX Lock 150 TOSIBOX 175 TOSIBOX Lock 210 TOSIBOX Lock 250 TOSIBOX Lock 200 TOSIBOX Lock 500 TOSIBOX Key Version 2.4 2 5. TOSIBOX Key instructions 5.1 Taking Master Key into use 5.2 Renaming and using devices 5.3 Adding extra Keys 5.4 Remote matching of extra Keys 5.5 PUK code for the Key 6. TOSIBOX Mobile Client 7. Troubleshooting 7. Dpannage 8. Maintenance instructions 8. Consignes dentretien 9. Technical data 10. Warranty 11. Legal Notices 11. Mentions lgales 12. Declarations 34 34 36 38 43 43 44 45 45 46 46 48 60 61 61 62 TABLE OF CONTENTS 1. Regulatory information 1.1 TOSIBOX Lock intended use 1.2 Important notice for wireless operation of TOSIBOX Lock 1.3 Safety and hazards 1. Informations rglementaires 1.1 Utilisation prvue de TOSIBOX Lock 1.2 Avis important concernant le Fonctionnement sans fil du TOSIBOX Lock 1.3 Scurit et dangers 2. Overview to TOSIBOX Key and Locks 2.1 TOSIBOX Key 2.2 TOSIBOX Locks 3. Getting started 4. TOSIBOX Lock instructions 4.1.1 Deploying Lock in Lock Mode 4.1.2 Deploying Lock in Client Mode 4.2 Connecting Locks 4.3 Updating the Lock Software 4.4 USB Modem settings for the Lock 4.5 Internal modem settings for Lock 500i 4.6 WLAN settings for Lock 100, Lock 150 and Lock 500 4.7 Key connection settings for the Lock 4.8 Advanced settings for the Lock 4.9 Internet connection priorities 4.10 PoE 4.11 Service Port 4.12 Mounting instructions 4.13 Input powering options 4.14 Lock 500 - Digital In/Out port with 24V DC out 4.15 Lock 500 - Software configurable I/O 4.16 Lock 500 - Digital I/O SMS alert 4 4 5 5 6 6 6 7 8 6 9 18 19 19 20 20 21 22 22 22 22 23 23 23 23 24 28 30 30 32 3 Congratulations for choosing TOSIBOX solution! It consists of modular components that offer unlimited expandability and flexibility. All products are compatible with each other as well as internet connection, operator, and device agnostic. The system works both in internal and external networks. TOSIBOX Key is a client used to access the network. TOSIBOX Lock is a router with firewall sharing access to devices. In physical matching, the Key is inserted to the Locks USB port. The devices exchange their security certificates (and public keys). This trust relationship is the basis for all communication happening afterwards. TOSIBOX creates direct VPN tunnel between the physical devices. Only trusted devices can access the network. TOSIBOX is globally audited, patented and performs at the highest security levels in the industry. The technology is based on two-factor authentication, automatic security updates and the latest encryption technology. TECHNICAL SUPPORT support@tosibox.com FINLAND

+358 44 744 0065 Business hours:

from 8 am till 4 pm Mon Fri (UTC+2) GLOBAL

+358 44 738 1778 Business hours:

from 8 am till 4 pm Mon Fri (UTC+2) TOSIBOX HELPDESK https://helpdesk.tosibox.com VPN tunnel through Internet TOSIBOX Lock Firewall TOSIBOX Key TOSIBOX Mobile Client HMI PLC Camera PC 4 1. REGULATORY INFORMATION 1.1 TOSIBOX LOCK INTENDED USE The Lock is used for controlling other devices remotely over the Internet via a VPN connection. To be installed into a DIN rail, inside a cabinet with the controlled devices. Alternatively, the Lock may be standing on its rubber feet on a table or a shelf. The product conformity with the requirements is guaranteed only when using the antennas supplied with the product. The use of other antennas will void the conformity and is not allowed. Lock 100/150: Office and residential environment Norway: Use of this radio equipment (Wi-Fi) is not allowed in the geographical area within a radius of 20 km from the centre of Ny-lesund, Svalbard, Norway. Lock 200: Office, residential and light industrial environment Lock 250: Office, residential and light industrial environment Norway: Use of this radio equipment (Wi-Fi) is not allowed in the geographical area within a radius of 20 km from the centre of Ny-lesund, Svalbard, Norway. Lock 500: Office, residential and light industrial environment Norway: Use of this radio equipment (Wi-Fi) is not allowed in the geographical area within a radius of 20 km from the centre of Ny-lesund, Svalbard, Norway. 1.2 IMPORTANT NOTICE FOR WIRELESS OPERATION OF TOSIBOX LOCK Because of the nature of wireless communications, transmission and reception of data can never be guaranteed. Data may be delayed, corrupted (i.e., have errors) or be totally lost. Although significant delays or losses of data are rare when wireless devices are used in a normal manner with a well-constructed network, TOSIBOX Lock with cellular modem should not be used in situations where failure to transmit or receive data could result in damage of any kind to the user or any other party, including but not limited to personal injury, death, or loss of property. Tosibox Oy and its affiliates accept no responsibility for damages of any kind resulting from delays or errors in data transmitted or received using TOSIBOX Lock with cellular modem, or for failure of the TOSIBOX Lock with cellular modem to transmit or receive such data. 5 1.3 SAFETY AND HAZARDS At least 20 cm separation distance between the antennas and persons must be maintained at all times. Do not operate your Lock with internal or external cellular modem:

In areas where blasting is in progress Where explosive atmospheres may be present including refuelling points, fuel depots, and chemical plants Near medical equipment, life support equipment, or any equipment which may be susceptible to any form of radio interference. In such areas, the Lock and the cellular modem MUST BE POWERED OFF. Otherwise, the cellular modem can transmit signals that could interfere with this equipment. In an aircraft, the Lock and the cellular modem MUST BE POWERED OFF. Otherwise, the Lock and the cellular modem can transmit signals that could interfere with various onboard systems and may be dangerous to the operation of the aircraft or disrupt the cellular network. Use of a cellular phone in an aircraft is illegal in some jurisdictions. Failure to observe this instruction may lead to suspension or denial of cellular telephone services to the offender, or legal action or both. Some airlines may permit the use of cellular phones while the aircraft is on the ground and the door is open. The Lock and the cellular modem may be used normally at this time. 6 1. INFORMATIONS RGLEMENTAIRE 1.1 DOMAINE DAPPLICATION DU TOSIBOX LOCK Le Lock permet de contrler des quipements distants travers Internet en crant une connexion VPN. Il peut tre install sur un rail DIN dans une armoire ct des quipements contrler. Il peut aussi tre pos sur ses patins en caoutchouc sur une table ou une tagre. La conformit des caractristiques de lquipement est seulement garantie avec linstallation des antennes livres. Lutilisation dautre antenne annulera la conformit et nest pas autorise. Lock 100/150 : environnement de bureau et rsidentiel Norvge : lutilisation radio (Wi-Fi) de cet quipement nest pas autorise dans une zone gographique situe dans un rayon de 20 km partir du centre de Ny-lesund, Svalbard, Norvge. Lock 200 : environnement de bureau, rsidentiel et industriel lger Lock 250 : environnement de bureau, rsidentiel et industriel lger Norvge : lutilisation radio (Wi-Fi) de cet quipement nest pas autorise dans une zone gographique situe dans un rayon de 20 km partir du centre de Ny-lesund, Svalbard, Norvge. Lock 500 : environnement de bureau, rsidentiel et industriel lger Norvge : lutilisation radio (Wi-Fi) de cet quipement nest pas autorise dans une zone gographique situe dans un rayon de 20 km partir du centre de Ny-lesund, Svalbard, Norvge. 1.2 INFORMATION IMPORTANTE POUR LUTILISATION DU RSEAU SANS FIL DU TOSIBOX LOCK En raison de la nature des communications sans fils, les donnes transmises et reues ne peuvent tre garanties. Les donnes peuvent tre retardes, corrompues (avoir des erreurs) ou tre compltement perdues. Bien que les pertes ou les retards de donnes soient rares lorsque les quipements sont utiliss dans des conditions normales dans des rseaux construits avec les rgles de lart, le TOSIBOX Lock avec un modem cellulaire ne devrait pas tre utilis dans les cas o les erreurs de transmission ou de rception de donnes pourraient entrainer des dommages de quelque nature que ce soit pour lutilisateur ou pour une tierce partie, incluant mais ne limitant pas les blessures physiques, la mort ou la perte de jouissance. Tosibox Oy et ses filiales ne pourront tre tenues pour responsables des dommages de quelque nature que ce soit rsultant de retards ou derreurs dans les donnes transmises ou reues en utilisant un TOSIBOX Lock avec modem cellulaire ou des problmes crs par lquipement TOSIBOX Lock avec modem cellulaire lors de transmission ou rception de ces donnes. 7 1.3 SCURIT ET DANGERS Une distance minimale de 20 cm entre les antennes et les personnes doit tre respecte tout moment. Nutilisez pas votre Lock avec un modem cellulaire interne ou externe :

Dans les zones des explosions sont est en cours O des atmosphres explosives peuvent tre prsentes, y compris des points de ravitaillement en carburant, des dpts de carburant et des usines chimiques proximit dquipements mdicaux, dquipements de survie, ou de tout quipement susceptible de subir toute forme dinterfrence radio. Dans ces zones, le Lock et le modem cellulaire DOIVENT TRE TEINTS, sous peine dmission de signaux par le modem cellulaire susceptibles dinterfrer avec ces quipements. Le Lock et le modem cellulaire DOIVENT TRE TEINTS dans un avion. Le Lock et le modem cellulaire sont susceptibles de transmettre des signaux pouvant brouiller les systmes de embarqus pouvant nuire au bon fonctionnement de lappareil ou interfrer avec les rseaux radio. Lutilisation dun tlphone cellulaire dans un avion est illgale dans certaines juridictions. Le non-respect de cette rgle peut entraner la suspension ou le refus des services de tlphonie cellulaire pour le contrevenant, ou des poursuites judiciaires, ou les deux. Certaines compagnies ariennes peuvent autoriser lutilisation de tlphones cellulaires lorsque lavion est au sol et que la porte est ouverte. Le Lock et le modem cellulaire peuvent tre utiliss normalement ce moment. 8 2. OVERVIEW TO TOSIBOX KEY AND LOCKS 2.1 TOSIBOX KEY TOSIBOX Key is an intelligent USB-connected device that contains a secure cryptoprocessor. The Key is used to establish a secure connection to the Lock. All TOSIBOX Keys and Locks are interoperable. SUB KEY An additional Key that has restricted access rights. BACKUP KEY A duplicated backup copy of the Key. All matched Keys and Locks are automatically synchronized between the original Key and the Backup Key. Key user interface (installed from the Key device). In the image you can see TOSIBOX Lock devices which are matched with the TOSIBOX Key and the network devices connected to each TOSIBOX Lock. 9 2.2 TOSIBOX LOCK TOSIBOX Lock is a device that accepts remote connections from matched Keys and creates private and secure access to connected network devices. The network devices that are connected to the Locks LAN port are automatically found. The Lock automatically distributes IP addresses for the Keys, Sub Keys and the network devices connected to LAN port(s) of the Lock. The Lock can also control network devices with fixed IP addresses. Lock settings can be changed via service port, encrypted TOSIBOX VPN connection local network SUB LOCK A Sub Lock is a Lock that has been converted to Sub Lock mode. When connecting two Locks to each other, one must be in Sub Lock mode of operation. Lock 100/150 Lock 200 Lock 210 Lock 250 Lock 500/500i LOCK 100/150 CONTENT LOCK 200 CONTENT 10 TOSIBOX Lock 100/150 AC Adapter*

AC Adapter*

TOSIBOX Lock 200 USB Cable DC Feed Plug DIN Rail Bracket Cable Saddle Rubber Feet Antennas (2) DC Feed Plug

* AC Adapter model is subject to change according to the market area.

* AC Adapter model is subject to change according to the market area. Ethernet Cable DIN Rail Bracket LOCK 210/250 CONTENT 11 AC Adapter*

DC Feed Plug Rubber Feet TOSIBOX Lock 250/210

(WiFi connectors only in Lock 250) Ethernet Cable AC Power Source*

AC Plug Adapters WiFi Antennas

(Only for Lock 250) DC Conversion Cable Digital I/O Connector Power Connector SIM Card Slot Cover

*) Antenna model is subject to change according to the market area.

*) LOCK 210/250: SIM card slot not in use.

*) AC Adapter model is subject to change according to the market area. LOCK 500/500i CONTENT LOCK 500 POWER SOURCE KIT CONTENT 12 TOSIBOX Lock 500/500i

(LTE ports only in Lock 500i) Ethernet Cable AC Power Source*

AC Plug Adapters LTE Antennas* (only Lock 500i) WiFi Antennas Digital I/O Connector Power Connector SIM Card Slot Cover DC Conversion Cable

*) Antenna model is subject to change according to the market area.

*) AC Adapter model is subject to change according to the market area. MODEL TBL5iA TBL5iAPS TBL5iB TBL5iBPS TBL5iC TBL5iCPS WIFI x LTE x POWER KIT WIFI ANT x LTE ANT x x x x x x x x x x x x x x x x x x x x x x x x 13 LOCK CONNECTIONS LOCK 100/150 WLAN antenna ports 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 1. USB Port for matching and USB Modem 2. WAN Port 3. LAN1 Port 4. LAN2 Port 5. LAN3 Port 6. Service port 7. Reset button (not in use) 8. DC Power Input Led indicators:

9. Power 10. WLAN 11. Service 12. LAN3 13. LAN2 14. LAN1 15. WAN 14 LOCK 200 9. 8. 7. 6. 5. 4. 3. 2. 1. 1. DC Power Input 2. Reset button (not in use) 3. Power led indicator 4. Info led indicator 5. WAN Port 6. Service Port 7. LAN1 Port 8. LAN2 Port 9. LAN3 Port USB Port for matching and USB Modem LOCK 250 1. 2. 3. 4. 5. 7. 9. 10. 11. 6. 8. 15 1. SIM card slot not in use 2. USB Port for matching and USB Modem 3. Reset button for Service Port activation only 4. Digital I/O -Connection Ethernet Connections:

5. LAN2 Port 6. WAN Port 7. LAN3 Port*

8. LAN1 Port 9. Power Connection 10. WiFi Antenna Port 1

(Lock 250 only) 11. WiFi Antenna Port 2

(Lock 250 only)

* LAN3 Port can be configured as a Service Port 14. 15. 16. 17. 18. 19. 20. 21. LED indicators:

14. Power 15. Internet 16. WiFi (Lock 250 only, LED not use in Lock 210) 17. Not in use Ethernet Port Leds:

18. LAN2 19. WAN 20. LAN3 21. LAN1 LOCK 500/500i 1. 2. 3. 4. 5. 7. 6. 8. 9. 10. 11. 12. 13.

* LAN3 Port can be configured as a Service Port 16 1. SIM card slot 2. USB Port for matching and USB Modem 3. Reset button for Service Port activation only 4. Digital I/O -Connection Ethernet Connections:

5. LAN2 Port 6. WAN Port 7. LAN3 Port*

8. LAN1 Port 9. Power Connection 10. WiFi Antenna Port 1 11. LTE Antenna Port 2

(Lock 500i only) 12. WiFi Antenna Port 2 13. LTE Antenna Port 1

(Lock 500i only) LED indicators:

14. Power 15. Internet 16. WiFi 17. LTE 14. 15. 16. 17. 18. 19. 20. 21. Ethernet Port Leds:

18. LAN2 19. WAN 20. LAN3 21. LAN1 17 LOCK USER INTERFACE Status bar shows general information. Locks and Keys Green: Connected Red: Disconnected Remotely controlled devices Details of the remotely controlled devices Green: Connected Red: Disconnected Login using admin user. Password can be found on the bottom of the Lock 3. GETTING STARTED THE FIRST DEPLOYMENT 1. Make sure the Lock is powered before proceeding to matching the Key with the Lock. Insert the Key into the USB port of the Lock. When the LED on the Key turns off, the matching is complete (approximately 10 seconds). Remove the Key from the Lock. You can also match additional Locks to the same Key. 2 - 3. Connect the Lock to your network according to your use case. Remember to make sure that the Lock has a working internet connection. 4. Connect the Key to your computer and install the Key software. Follow the section Deploying the Key. 5. Secure TOSIBOX connection is now ready to be used for controlling and monitoring devices remotely. 18 1. 3. 5. 2. 4. 4. TOSIBOX LOCK INSTRUCTIONS 4.1.1 DEPLOYING LOCK IN LOCK MODE VPN tunnel through Internet TOSIBOX Lock Firewall TOSIBOX Key TOSIBOX Mobile Client 19 HMI PLC Camera PC With its factory default settings, the Lock is connected to the Internet via its WAN port or a USB modem which can be connected to the USB port of the Lock. In this mode, the Lock creates its own protected local network for the connected devices. In this configuration, only devices that are connected to the Lock by cable or via WLAN access point are accessible with the Key. Note:

See USB Modem settings for the Lock (page 18) to connect a USB modem to the Locks USB port. If the Lock is connected to a DHCP enabled network via any of its LAN ports

(LAN1, LAN2 or LAN3) the Locks own LAN functionality can be restored by resolving any DHCP conflicts by removing improper LAN connections to the Lock. CONNECTING NETWORK DEVICES TO THE LOCK A) Connecting device(s) that use dynamic IP addresses (DHCP) Devices with a DHCP client enabled will automatically connect to the Lock. Plug the device(s) into the Locks LAN port(s) and go!

B) Connecting device(s) with Fixed IP addresses by configuring the DEVICE to the LOCK:

1. Before connecting device to Lock, connect to device per device manufacturers instructions on your PC and assign a new static IP address to device(s) from the Locks IP range printed on the bottom label of the Lock. Do not add same IP address. We recommend adding the next IP sequential address ABOVE the IP address on the lock, and so forth for each additional device. (*Note:

Locks IP and netmask address can also be found in the service port at Network > LAN) 2. Plug the device(s) into the Locks LAN port(s) and go!

C) Connecting device(s) with Fixed IP addresses by configuring the LOCK to the DEVICE:

1. Get the device(s) IP address(es) and netmask. 2. Connect your PC to the Locks service port and log in following the step 1 on page 17 Updating the Lock software. 3. Go to Network->LAN and change the IP address in the IPv4 address field to the next IP address above the IP address of the device (step 1). Also check that the IPv4 netmask field corresponds to the netmask set on the device and change it if necessary. 4. Plug the device(s) into the Locks LAN port(s) and go!

5. ADVANCED/ENTERPRISE USERS ONLY: Go to Network>LAN DHCP SERVER and set the Start value so that its higher than all used static addresses. Set the limit value to a suitable value so that it covers the rest of the unused addresses in the LAN range. For example, the range 192.168.5.50 192.168.5.254 contains 205 addresses so the Start value would be 50 and the Limitvalue would be 205. 20 4.1.2 DEPLOYING LOCK IN CLIENT MODE Client mode can be used for connecting the Lock to an existing network (e.g. an office network). In this mode, the Lock joins the network like any other device (e.g. a PC) and provides remote users with access to other devices in the same network. The Lock will obtain its address from the DHCP, so the local network needs to have a working DHCP server that allocated IP addresses. A) Connecting network devices in Client Mode 1. Log into the Locks web user interface as admin and open the LAN settings by clicking Network > LAN. 2. Change the LAN interface protocol field to DHCP Client. Click the Switch Protocol button and click Save. 3. Plug in a cable from the local network into one of the Locks LAN ports and go!

Note:

Do no connect the controlled devices to any LAN port. The Lock will scan the entire LAN network for connected devices and will grant device access to any user with a matched Key. Please keep this in mind when considering network and information security. In cases where access rights need to be restricted, switch on MAC/IP Filtering (under Advanced Settings) or set up the Lock in its factory default configuration. In this mode, the Locks inbuilt firewall does not protect the devices in the LAN network. Client Mode is deactivated from the Locks web user interface PC TOSIBOX Key VPN tunnel through Internet Router PC L A N PC/Laptop Server TOSIBOX Lock Printer 4.2 CONNECTING LOCKS With TOSIBOX Locks one can connect machines in separate places so that the connection between them is permanently and automatically on. One example is a real-time protected connection between home and office. This is made with a Lock/Sub Lock solution (see accompanying image Connecting Locks). To Lock 100 and Lock 150 can be connected to up to 10 Sub Locks, to Lock 210 and Lock 250 can be connected to up to 20 Sub Locks to Lock 200 and Lock 500 can be connected to up to 50 Sub Locks. First match the Key to all the Locks to be connected as described in section Instructions for TOSIBOX Key and Lock setup. CONNECTING LOCKS 1. Insert a matched Key to the USB port of the computer. 2. Choose Devices from the Key user menu and Connect Locks from the drop down menu. 3. Choose the Locks that you want to connect together and choose Next. 4. Choose the Lock that you want to attach the Sub Locks. The other Locks will be changed to Sub Lock operating mode. 5. Confirm the selection > Save > matching is ready. Note: The connections will come into effect when the Locks have access to the Internet. The Sub Lock ends of the connection in the picture do not have their own DHCP service. If the connection between the Lock and the Sub Lock is interrupted, the network devices connected with the Sub Lock can no longer connect to the Internet and each other. 21 Lock Sub Lock Sublock Sub Lock Sublock Sub Lock Sublock 4.3 UPDATING THE LOCK SOFTWARE 1. a. Connect the computer to the service port of the Lock with an ethernet cable. First check that you have access to the Internet via the service port. Open an internet browser and type http://172.17.17.17 into the address field to access the Lock user interface. Do not type www before the http:// in the address. b. Alternatively you can also log in remotely. When the connection between the Key and the Lock is active, double click the Lock symbol in the Key user interface. 2. Log in using admin for the user ID. The default admin password is visible on the bottom of the Lock. 22 3. Choose Settings > Software update. If there is a software update available for the Lock, you can start the update by clicking the Start software update button. 4. Wait until the update has been downloaded and installed. Do not interrupt the power of the Lock during the software update process. The update is complete when the software gives a notice Software updated successfully. Automatic software updates are activated as a default setting. You can select the time when the automatic update of the released software is allowed. You can deactivate the automatic software update from the Lock user interface. Choose Settings > Software update > uncheck the box Auto-

update enabled. 4.4 USB MODEM SETTINGS FOR THE LOCK You can connect the Lock to the Internet with a USB Modem. For information on supported modems go to https://helpdesk.tosibox.com. 1. Log in as admin user, select Network > USB Modem. 2. Either use the Automatic APN setting or fill in the APN and if 4.5 INTERNAL MODEM SETTINGS FOR LOCK 500I You can connect the Lock to the Internet with an internal Modem. Before inserting or removing the SIM card(s), disconnect the Lock power supply. 1. Log in as admin user, select Network > Internal Modem 2. Either use the Automatic APN setting or fill in the APN and if necessary the PIN field according to the SIM card settings. For APN settings information, please contact your mobile operator. 3. Confirm the selection > Save. 4.6 WLAN SETTINGS FOR LOCK 100, LOCK 150, LOCK 250 AND LOCK 500 On Lock 100, Lock 150, Lock 250 and Lock 500 you can configure the WLAN as Client (providing Internet access for the Lock) or as Access Point (providing access to Lock LAN and Internet for wireless devices). For detailed set-up instructions visit https://helpdesk. tosibox.com. 4.7 KEY CONNECTION SETTINGS FOR THE LOCK necessary the PIN field according to the SIM card settings. For APN settings information, please contact your mobile operator. You can change the Key connection type from Layer 3 -routed

(default) to Layer 2 -bridged (Connection type > Layer 2-bridged). 3. Confirm the selection > Save. 4. Connect a Tosibox supported USB Modem to the USB port of the Lock. On Layer 2 connections you can allow connections from Lock to Key. Log into the Lock as admin, select Settings > Keys and Locks >

remove selection Deny access towards client For more details on Layer 2 and Layer 3 connections visit https://helpdesk.tosibox.com. 4.8 ADVANCED SETTINGS FOR THE LOCK On the Advanced settings page you can configure LAN and Internet access restrictions and security related settings as well as time zone and NTP server settings. NTP settings are applicable to all products except Lock 100. 1. Log in as admin 2. Choose Settings > Advanced settings 3. Confirm changes > Save 4.9 INTERNET CONNECTION PRIORITIES Several alternative Internet connections can be used by the Lock:

1. WAN 2. USB modem 3. WLAN (Lock 100, Lock 150, Lock 250 and Lock 500 only) 4. Internal modem (Lock 500i only) One of the available connections can be selected as a main connection and the other connections can be set as backup connections. In the event that the main connection is interrupted, the connection is automatically shifted to preselected backup connections according to the priority setting (eg. WAN port > USB Modem). The connection is switched back to the main connection once it is available again. 23 4.10 POE

(LOCK 200 ONLY) The PoE out port supports PoE output, with auto detection feature. This means you can connect laptops and other non-PoE devices without damaging them. The PoE on PoE out outputs approximately 2V below input voltage and supports up to 0.58A (So e.g. 24V PSU will provide 22V/0.58A output to the PoE out port). The device accepts powering from the power jack or from the PoE in port (passive PoE) 1. DC power jack (5.5mm outside and 2mm inside diameter, female center pin positive) accepts 8-27V DC +/-10%

2. The PoE in port accepts passive Power over Ethernet 8-27V DC

+/-10%

Under maximum load, the power consumption of this device is 7W. 4.11 SERVICE PORT On Lock 100, Lock 150 and Lock 200 a dedicated Service Port is available. On Lock 210, Lock 250 and Lock 500, LAN3 port can be configured as Service port by pressing the reset button for 3 seconds when there is no cable in LAN3. When completed, the Internet status LED will blink for three seconds. Lock Management Interface can then be accessed by entering http://172.17.17.17 on the address bar of your browser. Assigning the port back to LAN range can be done following the same procedure or by restarting the device. 24 4.12 MOUNTING INSTRUCTIONS LOCK 100/150 QUICK INSTALLATION TO DIN RAIL The bottom of the Lock has integrated hooks that allow a quick installation to DIN rail with the LAN/WAN ports facing upwards. the sales package. There are M4 threaded mounting holes on the bottom of the equipment. The screws shall be placed through the bottom sticker which has the hole locations indicated. Use only the screws included in the sales package. Using longer screws pose a risk of damaging the device internal electronics. More versatile installation options to DIN rail, such as angle brackets are available from an authorized TOSIBOX reseller as an accessory. LOCK 100/150 SECURE INSTALLATION TO DIN RAIL For environment where a more robust installation method is needed or another installation orientation is wanted, the Lock can be installed to DIN rail with the clip and screws included in LOCK 100/150 WALL MOUNTING The bottom of the Lock has two keyhole shaped openings that allow the Lock to be installed on the wall with countersunk screws. LOCK 200 INSTALLATION TO DIN RAIL The Lock can be installed to DIN rail with the clip and screws included in the sales package. There are M3 threaded mounting holes on three sides of the equipment. For attachment on either of the narrow sides, the screws with length of 10 mm shall be used. For attachment on the bottom of the Lock, the screws with length of 6mm shall be used. The screws shall be placed through the bottom sticker which has the hole locations indicated. See pictures 1 - 4 for the mounting options. Lock 100/150 with DIN rail bracket 25 26 LOCK 200 USING THE RUBBER FEET Rubber feet included in the sales package can be installed in the bottom of the Lock for more convenient installation horizontally e.g. on a table. See picture 5 and 6 for the mounting. Picture 5. Picture 6. LOCK 210, LOCK 250 AND LOCK 500 INSTALLATION ON THE TABLE The Lock can be placed standing vertically on its rubber feet. There are vent holes on both sides of the device, designed to provide cooling air passing through the device. Allow enough free space, minimum of 25mm around the Lock to ensure the free flow of cooling air. Make sure there is no risk of the device falling aside as this would block the cooling air flow through the vent holes. Have all the cables secured in such a way that they cannot make the Lock fall aside and routed as far away from the antennas as possible. Position the antennas in orthogonal pattern, i.e. in such a way that they form 90 degrees angle between each other. Observe the gender of the antenna connectors to make sure each antenna is fitted into the correct antenna port. To achieve the maximum radio performance, follow the antenna pattern shown in Picture 7. Avoid installing the Lock close to other high-power radio transmitters as they may affect the performance of the Lock. Also avoid installing the Lock close to any sensitive devices that may be affected by the antenna signals emitted by the radio transmitter of the Lock. In case of unwanted disturbance, relocate the cables and/or the Lock in a place where the devices do not disturb each other. LOCK 210, LOCK 250 AND LOCK 500 INSTALLATION TO DIN RAIL The Lock can be installed to DIN rail by using the integrated DIN rail bracket located in the backside of the device. Follow the sequence shown in picture 7. Removal is the reverse of installation. There are vent holes on both sides of the device, designed to provide cooling air passing thru the device. Allow enough free space, minimum of 25mm around the Lock to ensure the free flow of cooling air. Route and secure all cables as far away from the antennas as possible. Position the antennas in orthogonal pattern, i.e. in such a way that they form 90 degrees angle between each other. Observe the gender of the antenna connectors to make sure each antenna is fitted into the correct antenna port. To achieve the maximum radio performance, follow the antenna pattern shown in Picture 7. Installing the Lock inside of metal cabinet may result in the degradation or loss of radio performance. In such case have the antennas installed outside of the cabinet using coaxial RF extension cables, available at your local specialized dealer or service technician. Avoid installing the Lock close to other high-power radio transmitters as they may affect the performance of the Lock. Also avoid installing the Lock close to any sensitive devices that may be affected by the antenna signals emitted by the radio transmitter of the Lock. In case of unwanted disturbance, relocate the cables and/or the Lock in a place where the devices do not disturb each other. 27 Picture 7. 1. Place the DIN-rail bracket slider under the lower edge of the DIN rail. 2. Push the Lock upwards until the slider travel is in the end 3. Push the upper edge of Lock parallel to the wall 4. Slide the Lock down and check that the DIN rail bracket has a firm grip of the DIN rail Picture 8. Lock 500i installed to DIN rail. See the antenna directions. 28 4.13 INPUT POWERING OPTIONS LOCK 100/150 Use the AC adapter included in the sales package. Alternatively, in case the operating voltage of 8-30V DC (absolute value) is available from an external power source, a DC input plug included in the sales package can be used. Connect the stripped wires by tightening the screws with a flat blade screwdriver. Follow the polarity marking in the plug. LOCK 200 Use the AC adapter included in the sales package. Alternatively, in case the operating voltage of 8-27V DC +/-10% is available from an external power source, a DC input plug included in the sales package can be used. Connect the stripped wires by tightening the screws with a flat blade screwdriver. Follow the polarity marking in the plug. To secure the input power cable from being accidentally pulled away from the power input jack, the use of the cable saddle is recommended. The cable saddle is included in the sales package and it is locked in place by inserting it into the 4mm diameter hole in the front panel. Loop the power cable around the frame and snap the jaw closed. 29 LOCK 500*PS In addition to the powering options for Lock 500, an AC adapter included in the Lock500*PS-version sales package may be used. The AC adapter is supplied with interchangeable plugs that makes it possible to connect to different electrical outlets. Select and fit the plug that complies with your local requirements. The AC adapter DC output connector is coaxial. Therefore, a conversion cable is necessary to convert from coaxial DC connector to stripped wires required by the Lock power input connector. The conversion cable is included in the Lock500*PS-version sales package. Follow the same procedure as with Lock 500 powering options. LOCK 210, LOCK 250 AND LOCK 500 A power source with voltage of 12-48V DC +/-20% is required to operate the Lock. The power input port is equipped with a removable plug-in connector included in the sales package. Remove the connector if needed and connect the stripped power wires by tightening the wire connector screws with a flat blade screwdriver. A device frame connection is available at the power input port. It is recommended to wire this connection to the installation cabinet protective earth potential with as short cable as possible. This will enhance the immunity of the equipment against conducted and radiated RF disturbance, as well as against electrical transients that may be propagated by the ethernet cables. Use

+ and - terminals to power the device. Follow the polarity and grounding symbols in the front panel. Make sure the connector is completely plugged in and secure the connector into the Lock frame by tightening the locking screws with a flat blade screwdriver. The wires with a cross-section of up to 1.5mm2 (AWG 16) can be used with the connector. The stripping length of the conductor is 6 mm. The Lock is equipped with a 2 Amp internal fuse. In case of a device malfunction, the fuse is blown to protect the power circuitry. The fuse cannot be replaced by the user. In case of a blown internal fuse, do not open the device. Instead, contact your local Tosibox distributor for service. 30 Input port roles can be selected from:

Not selected no action based on port state Allow Internet connection when port voltage is set high, Lock allows Internet connections. When port voltage is set low, there is no Internet access and the Lock visibility is offline for all Keys matched with it. Prevent Internet connection when port is set high, Lock prevents Internet connection and the Lock visibility is offline for all Keys matched with it. When port voltage is low, Internet access is allowed. Allow VPN connections when port voltage is set high, Lock allows incoming VPN connections from matched Keys. When port voltage is low, VPN connections are not allowed and the Lock visibility is offline for all Keys matched with it. Prevent VPN connections when port is set high, VPN connections are not allowed and the Lock visibility is offline for all Keys matched with it. When port voltage is low, Lock allows incoming VPN connections from matched Keys. 4.14 LOCK 210, LOCK 250 AND LOCK 500 -

DIGITAL IN/OUT PORT WITH 24V DC OUT The Digital I/O port is equipped with a removable plug-in connector included in the sales package. Remove the connector if needed and in case of a solid wire simply insert the stripped signal wire to the correct port opening. In case a flexible wire is used, press the release button with a flat blade screwdriver to open the locking springs and insert the wire. Follow the signal symbols in the front panel and connect all needed signals. Make sure the connector is completely plugged in and secure the connector into the Lock frame by tightening the locking screws with a flat blade screwdriver. The wires with a cross-section of up to 1.5 mm2

(AWG 16) can be used with the connector. The stripping length of the conductor is 10 mm. The wire is released from the connector by pushing the corresponding release button with a flat blade screwdriver. 4.15 LOCK 210, LOCK 250 AND LOCK 500 -

SOFTWARE CONFIGURABLE I/O The Digital I/O state information and configuration can be accessed from Settings -> Digital I/O menu. For signal physical properties, please refer to section I/O specifications at the end of this manual. 31 VPN connection active when Lock detects active VPN connection(s) from matched Keys, the port voltage is set high. When there are no active VPN connections, the port voltage is set low. VPN connection inactive When there are no active VPN connections the port voltage is set high. When Lock detects active VPN connection(s) from matched Keys, the port voltage is set low. Output port roles can be selected from:

Not selected no action based on port state Internet connection OK when Lock detects Internet connection to be OK, the port voltage is set high. If the Internet connection is not OK, the port voltage is set low. Internet connection failed - when Lock detects there is no Internet connection, the port voltage is set high. If the Internet connection is OK, the port voltage is set low. 32 4.16 LOCK 500 - DIGITAL I/O SMS ALERT In order for the SMS alert feature to work, make sure to use a SIM card that supports sending SMS messages. SMS alert feature can be activated on Digital I/O settings by selecting Send SMS for Input port 1 role and/or Input port 2 role. After this, more settings for the SMS alert feature will become visible. The following settings need to be defined for input port 1 or input port 2 or both:

Input port X SMS action Select the trigger (high / low) for SMS sending: Send message when input X is high or Send message when input X is low Input port X SMS message Define the message to be sent. Concatenated SMS is not supported so the maximum length of a message is 160 characters (western alphabet). If using non-western alphabet, the limit is 70 characters. Input port X SMS phone numbers Enter phone number(s) to send the message to. Only one number per input field is allowed. More phone numbers can be added by adding a new input field. Input port X SMS send limit Determines how many messages per minute will be sent. 0 stands for no limit. Use this feature when the I/O may switch high-low several times and you do not want to send SMS for each state change. Any message sent will be sent to all numbers defined in Input port X SMS phone numbers Input port X SMS target modem Currently only internal modem is supported. In case there are two SIMs inserted, the SMS will be sent from the active SIM at the time of the alarm. Both I/O ports have SMS settings independent of each other. 33 Sending an SMS will happen in 1-10 seconds of the trigger. In case the SIM subscription does not support sending SMS, the messages will not be sent. Once the SMS has been sent by the Lock 500, the time to get it delivered to the destination is dependent on the Operator used. Some subscriptions need the Message Service Center number defined to be able to send SMS messages. This can be set in Internal Modem settings where SMS center number can be defined. The number should be defined in international format (e.g.

+358 Note that the setting can be defined separately for both SIM slots. 34 5. TOSIBOX KEY INSTRUCTIONS 5.1 TAKING MASTER KEY INTO USE 1. Insert the matched Key into the USB port of your computer. You should notice an auto play window open up on your desktop. If not, double click the executable file located in the Keys folder (Setup_ Tosibox.exe). If your computer asks whether you want to allow Tosibox to make changes to your computer click yes. 2. The Key software will ask for a password that you can enter if you wish (recommended). By entering a password, you can prevent the unauthorized use of the Key. Store the password safely. Also pay attention to PUK code instructions on section 6.5. 3. The Key software opens up a window that shows the Locks that have been matched to the Key. Connect the Key with the wanted Lock by clicking the Locks Connect icon. 4. The Key info dialogue shows the status of the connection between the Key and Lock. The Key is now ready to be used The Lock symbol displays a different colour according to the operating status of the Lock:

Red = The Lock is not connected to the Internet. Yellow = The Lock is connected to the Internet, but the Key doesnt have a remote connection to the Lock. Green = The Lock is connected to the Internet and the Key has a remote connection to the Lock. The Key symbol located in the computers task bar displays different colours according to the operating status of the Key:

Red = The Lock is not connected to the Internet. Yellow = The Key is connected to the Internet, but not to any found Locks. Green = The Lock is connected to the Internet and the Key has a remote connection to the Lock. REMOTE MATCHING Remote Matching is an alternative way to match the first master Key to a new Lock, Central Lock, or Virtual Central Lock. In Remote Matching, the Key does not have to be physically connected to a Lock, but it uses a unique, cryptographic code instead. This can be useful e.g. if the Lock needs to be reset and the master Key is not available in the same place. With Virtual Central Lock, remote matching is the only way to match it with a master Key. The process is initiated by generating the remote matching code on the Lock that shall be matched, which enables remote matching on the Lock with that code only. Then, the remote matching wizard is opened on the master Key software and the code is entered there. This completes the process and the devices will establish a trust relationship over the Internet. The Lock appears on the master Key similarly as after physical matching. Note: make sure to keep the code safe when transferring it to the master Key as anybody who knows the code can match the Lock and connect to it. If the code gets lost, deactivate remote matching on the Locks web user interface and start it again by generating a new code. Currently Remote Matching is supported on following Lock products:

Lock 500/Lock 500i Lock 250 and Lock 210 Lock 150 Virtual Central Lock with SW 2.2.0 or later Central Lock with SW 2.3.0 or later Lock 100 and Lock 200 with SW 3.3.0 or later You will also need TOSIBOX Key SW v2.15.0 or later to complete the matching process. Both the Lock and the Key need to be connected to the Internet for the feature to work. Required Steps to Perform Remote Matching 1. Log in as admin on Lock or (Virtual) Central Lock 2. Go to Settings > Keys & Locks click Generate button under Remote Matching title 35 3. Start Key SW on a PC/Mac 4. Open Devices > Remote Matching 5. Enter the code in the wizard and click Start If both devices are online, the process completes after a few seconds and the Lock is now matched with the Key. 36 5.2 RENAMING AND USING DEVICES This is the start window for the Key user interface. You can open the Lock user interface by double clicking the Lock icon on the left side of the window. By clicking an extra menu opens. 1. Click Open browser automatically when connected to have the Lock user interface launch automatically when the Key connects to the Lock. 2. Selecting Show all details allows you to view all the details of the connected device. 3. Click Rename to rename the selected Lock. The Lock names are global so a Locks name change will be reflected on all locks and Keys. Only Master and Back-up Keys can rename Locks. 37 1. You can open the browser user interface of the controlled device in Open with browser (http). 2. You can connect to network sharing in Open windows network share. 3. You can open the remote desktop connection in Open Remote Desktop Connection (RDP), if available. 4. You can check the functionality of the controlled device with PING command in Check if host available (PING). 38 ACTIVATION The activation process has five steps as outlined below:

1. On master Key: generate activation code:

Go to Devices > Manage Keys > Add Key, and add a new Key of type SoftKey and give it a name. 2. An activation code will be generated, send it over to the end user who shall activate and use the SoftKey client. 5.3 ADDING EXTRA KEYS Additional Keys can be matched with a Lock. 1. Insert a previously matched Key into the USB port of your computer. 2. Insert a new Key to another USB port of the computer. 3. Wait until New Key window opens. 4. If you are adding a Sub Key, follow the steps 1-4 ADDING SUB KEY. If you are adding a Backup Key, follow the steps 1-4 ADDING BACKUP KEY. ADDING TOSIBOX SOFTKEY To activate SoftKey on a PC or Mac, you will need:

1. SoftKey license for the master Key please contact our sales to purchase one 2. Key SW v3.0.0 or later both on the master Key and the client computer see download instructions here Also, to connect to Locks with SoftKey, the software on the Lock needs to support SoftKeys. SoftKey is supported by these versions:

1. Lock 100 and Lock 200: SW v3.3.0 onwards 2. Central Lock and Virtual Central Lock: SW v2.3.0 onwards 3. Lock 500 / Lock 500i, Lock 250, lock 210 and Lock 150: all versions 39 3. On client computer: activate SoftKey: Make sure TOSIBOX Key 5. Define access rights for the new SoftKey by following the wizard. software v3.0.0 or later is installed on the PC. Start the software. Activate the SoftKey by choosing Devices > Activate SoftKey and enter the activation code. The SoftKey is now ready to be used and can connect to the Locks where access was granted in step 5. 4. On Master Key: Confirm SoftKey. Confirm the activation from the pop-up dialog. ADDING SUB KEY 40 1. When a new Key is turned into a Sub Key, choose Sub Key, provide a descriptive name for it, and click Next. A Sub Key is able to connect to chosen Locks but it has no rights to create new Keys. 3. Confirm the selection by pressing Save. Matching of the extra Key is now complete. 2. Select the Lock(s)/Sub Lock(s) to which you want to grant access for the extra Key and choose Next. 4. The extra Keys can be removed in the Lock user interface by clicking Settings > Keys and Locks

(admin only). ADDING BACKUP KEY 41 1. Choose Backup Key and press Next. All Keys and Locks are automatically synchronized between the Backup Keys. 2. Confirm by pressing Save. 3. The Backup Key is now created. Press Close button to exit the feature. 4. The Backup Keys can be managed later in the Key user interface under Manage Keys. Important: This feature creates a Backup Key with equal user rights. Later, when the new locations are deployed by the other Key, the access rights are automatically copied to both Keys. 42 EXTRA KEY USE CASE Key Subkey Sub Key 43 5.4 REMOTE MATCHING OF EXTRA KEYS 5.5 PUK CODE FOR THE KEY This feature is only available for Keys that have already been matched locally. 1. Insert the Key into the USB port of the computer and wait for the TOSIBOX Key application to start. 2. Choose Manage Keys from the Devices menu in the user interface and open the Sub Keys tab. 3. Choose the extra Keys to which you want to add new Locks and 1. In the event that a wrong Key password has been entered six consecutive times, the Key will be locked. To unlock the Key a personal unlocking code, PUK is needed. The PUK code is delivered with the Key. Store it safely. 2. Go to the Password menu in the Key software and choose Change password using PUK code.... 3. Enter the PUK code into the PUK-code field. press the Match... button. 4. Enter a new password into the New password field. 4. Choose the Locks to which you want to add to the extra Keys and 5. Confirm your password by typing it once more into the New press the Next button. password (again) field. 5. A list of targeted Locks is displayed. Confirm the choises and click 6. Choose OK. Save. 6. Matching of the extra Keys is now complete. Press Finish button to exit the wizard. 6. TOSIBOX MOBILE CLIENT 44 TOSIBOX Mobile Client gives you secure and easy remote access on the go. The application is available for iPhones, iPads and Android devices. See a video how to create a TOSIBOX Mobile Client with a TOSIBOX Key at the Tosibox YouTube channel:

https://youtu.be/x7Ee-0A4IO8 1. Insert TOSIBOX Key into your computers USB port. 2. Login to TOSIBOX Key Client software. 3. In the TOSIBOX Key Client software, select Devices > Manage keys. 4. Select Mobile Cleints tab and Add new. 5. Name the new Mobile Client. 6. Grant the Mobile Client user access to Locks. 7. Generate a QR code for Mobile Client. 8. Download TOSIBOX Mobile Client from Google Play or App Store and install it. 9. Scan the QR code. 10. Mobile Client is now activated. Finalize the activation by setting a password. 11. Once logged in, the app shows the Locks the Mobile Client (Sub Key) user has access to. The user can now configure Locks via mobile. 7. TROUBLESHOOTING 45 7. DPANNAGE The TOSIBOX Key software cannot be installed:

Le logiciel pour la TOSIBOX Key ne peut tre install Check whether your computer has an operating system supported by TOSIBOX Restart the computer and plug in the Key. The Keys connection window does not show the connections:

The computer is not connected to the Internet. The Key is not matched with the Lock. The Lock does not have an internet connection or is not connected to the AC adapter. The Lock connection in the window remains yellow:

The Key has found a Lock, but VPN has not yet been established. Device connections or the Lock connection in the window remains red:

Make sure the controlled devices are connected to the Lock. If connected wirelessly, use the ethernet service port to log in to the Lock. Check that the wireless connection is enabled and that the Lock and the controlled device have the same password and encryption settings. Make sure the controlled device has a DHCP-service. If not, add the device in the device list of the Lock and specify the IP address of the device . Visit https://helpdesk.tosibox.com for more instructions. Vrifiez que votre ordinateur dispose dun systme dexploitation pris en charge par TOSIBOX. Redmarrez lordinateur et branchez la Key. La fentre de connexion de la Key ne montre pas les connexions :

Lordinateur nest pas connect Internet. La Key nest pas associe au Lock. Le Lock ne dispose pas dune connexion Internet ou nest pas sous tension. La connexion du Lock dans la fentre reste jaune :

La Key a trouv un Lock, mais le VPN na pas encore t tabli. Les connexions au priphrique ou la connexion de LOCK dans la fentre reste rouge :

Assurez-vous que les appareils contrls sont connects au Lock. Si vous tes connect via un rseau sans fil, connectez-vous au Lock par le port de service Ethernet. Vrifiez que la connexion sans fil est active et que le Lock utilise le bon mot de passe et les mmes paramtres de cryptage de lappareil supervisant le rseau sans fil. Assurez-vous que lappareil supervisant le rseau sans fil dispose dun service DHCP. Sinon, ajoutez le LOCK la liste des priphriques et spcifiez son adresse IP. Pour plus dinstructions, visitez https://helpdesk.tosibox.com 46 8. MAINTENANCE INSTRUCTIONS 8. CONSIGNES DENTRETIEN TOSIBOX devices should be treated with care. By observing the following instructions you can enjoy the maximum performance of the devices and ensure full warranty coverage. Les quipements TOSIBOX doivent tre traits avec prcaution. En observant les instructions suivantes, vous profiterez de leurs performances maximales et aurez lassurance davoir une garantie optimale. Keep the devices dry. Protect the devices from precipitation, moisture and liquids as they can cause corrosion to electronic circuits. The devices are intended for indoor use only. Do not use them in wet environment or outdoors. Gardez les appareils au sec. Pour viter des risques de corrosion des circuits lectroniques, protgez les quipements des prcipitations, de lhumidit et des liquides. Les appareils sont conus pour une utilisation en intrieur uniquement. Ne les utilisez pas dans un environnement humide ou lextrieur. Protect the devices from dirt and dust. When necessary, clean the devices with a soft, dry cloth. Do not use chemicals, solvents, detergents or pressurized air. Protgez les appareils de la salet et de la poussire. Si ncessaire, nettoyez les appareils avec un chiffon doux et sec. Nutilisez pas de produits chimiques, de solvants, de dtergents ou dair comprim. Protect the devices from heat. High temperatures can damage plastic parts and shorten the life of the electronics. Protect the devices from cold. Low temperatures can make them more susceptible to breakage. Let the devices temperature stabilize properly before deploying them into the network.. Protect the devices from mechanical shocks. Do not shake, knock or drop the devices. Do not paint the devices. Protgez les appareils de la chaleur. Les tempratures leves peuvent endommager les parties en plastique et raccourcir la dure de vie des composants lectroniques. Protgez les appareils du froid. Les basses tempratures peuvent les rendre plus sensibles la casse. Avant leur installation, laissez-les revenir temprature ambiante. Protgez les appareils des chocs mcaniques. Ne les secouez pas, ne les frappez pas et ne les laissez pas tomber les appareils. Ne peignez pas les appareils. Do not cover the devices or install them on top of each other. This can cause overheating. Allow enough free space around the devices to ensure the free flow of cooling air. Ne couvrez pas les appareils et ne les empilez pas les uns sur les autres sous peine de provoquer une surchauffe. Assurez-vous dassez despace libre autour des appareils pour leur refroidissement par libre circulation dair. Do not open the devices. There are no serviceable parts inside the devices. If the devices malfunction or need servicing, contact an authorized service facility. Nouvrez pas les appareils. Aucune rparation ne peut tre effectue par vous-

mme. Si les quipements ne fonctionnent pas correctement ou ncessitent une rparation, contactez un centre de rparation agr. After the service life of the devices is over, do not throw them into domestic waste. Instead, take them to an authorized waste electronics collection facility. Aprs leurs utilisations, ne les jetez pas mais ramenez-les dans un centre de collecte de dchets lectroniques. 47 9. TECHNICAL DATA TOSIBOX LOCK 100 Ports 1x USB 2.0, type A, 500 mA maximum load allowed 1 x RJ-45 WAN conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) 3 x RJ-45 LAN conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) USB modem options TB4GM2EU, for 3rd party options, please see: http://www.tosibox.com/support WLAN 1 x RJ-45 Service conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) IEEE 802.11 b/g/n, max. 150 Mbps WAN connection features Independent of operating systems Works in all Internet connections (operator independent) Firewall friendly Works with dynamic, static and private IP addresses Built-in firewall, NAT Up to 10 concurrent VPN connections VPN throughput up to 6 Mb/s (BF-CBC 128 bit) Physical properties 132 mm x 99 mm x 35.5 mm / 5.2 x 3.9x 1.4 (L x W x H) Weight 365 g / 1.31 lbs (net weight article) Operating temperature -25 C +70 C / -13 F 158 F Oparating humidity 20 - 80% RH, non condensing Storage temperature -40 C +70 C / -40 F 158 F Cast aluminium casing IP protection class: IP20 Maximum operating altitude 2000 m / 6562 ft Overvoltage category I WEP, WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed, WPA-EAP, WPA2-EAP TKIP/AES encryption Frequency 2.412 2.462 GHz, 11 channels Output power 20 dBm max Powering requirements 8-30V DC (absolute value), 7.2W max, reverse polarity protected TOSIBOX LOCK 100 POWER SOURCE Model ATS00ST-W120E Operating temperature: 0 C +40 C / 32F 104 F Operating humidity: 20 - 80% non-condensing Storage temperature: -20 C +60 C / -4F 140 F Storage humidity: 10 - 90% non-condensing 48 TOSIBOX LOCK 150 Ports 1x USB 2.0, type A, 500 mA maximum load allowed USB modem options TB4GM2EU, TB4GM2AU, TB4GM8EU 1 x RJ-45 WAN conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) WLAN 3 x RJ-45 LAN conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) IEEE 802.11 b/g/n, max. 150 Mbps 1 x RJ-45 Service conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) WEP, WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed encryption Frequency 2.412 2.462 GHz, 11 channels Output power 18 dBm max Powering requirements 10-30 V DC +/- 10% (absolute value), 7.2W max, reverse polarity protected WAN connection features Independent of operating systems Works in all Internet connections (operator independent) Firewall friendly Works with dynamic, static and private IP addresses Built-in firewall, NAT Up to 10 concurrent VPN connections VPN throughput up to 10 Mb/s (BF-CBC 128 bit) Physical properties 132 mm x 99 mm x 35.5 mm / 5.2 x 3.9x 1.4 (L x W x H) Weight 365 g / 1.31 lbs (net weight article) Operating temperature: -20 C +55 C / -4 F 131 F Oparating humidity 20 - 80% RH, non condensing Storage temperature -40 C +70 C / -40 F 158 F Cast aluminium casing IP protection class: IP20 Maximum operating altitude 2000 m / 6562 ft Overvoltage category I 49 TOSIBOX 175 Ports 1 x RJ-45 WAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X) 1 x RJ-45 LAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X) LAN can be assigned as Service connection, 10/100 Mb/s, auto-negotiation Powering requirements 9-35V DC, Maximum power consumption 10W

(MDI / MDI-X) WAN connection features Independent of operating systems Works in all Internet connections (operator independent) Firewall friendly Works with dynamic, static and private IP addresses Built-in firewall, NAT Up to 10 concurrent VPN connections VPN throughput up to 10 Mb/s Physical properties 104 mm x 28 mm x 110 mm / 4.09 x 1.10 x 4.33 (L x W x H) Weight 305 g / 0.67 lbs (net weight article) Operating temperature -20 C +55 C / -4 F +131 F Storage temperature -30 C +70 C / -22 F +158 F Aluminium alloy shell IP protection class: IP30 50 TOSIBOX LOCK 200 Ports 1x USB 2.0, type A, 500 mA maximum load allowed 1 x RJ-45 WAN conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) 3 x RJ-45 LAN conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) 1 x RJ-45 Service conn., 10/100 Mb/s, auto-negotiation (MDI / MDI-X) USB modem options TB4GM2EU, TB4GM2AU, TB4GM8EU, for 3rd party options, please see:

https://helpdesk.tosibox.com Powering requirements 8-27V DC +/-10%, 7.0W max, reverse polarity protected WAN connection features Independent of operating systems Works in all Internet connections (operator independent) Firewall friendly Works with dynamic, static and private IP addresses Built-in firewall, NAT Up to 50 concurrent VPN connections VPN throughput up to 15 Mb/s (BF-CBC 128 bit) Physical properties 140 mm x 36 mm x 125 mm / 5.51 x 1.42 x 4.92 (L x W x H) Weight 530 g / 1.17 lbs Operating temperature --20 C +50 C / -4 F +122 F Operating humidity 20 80% RH, non condensing Storage temperature -40 C +70 C / -40 F +158 F Cast aluminium casing IP protection class: IP20 Maximum operating altitude 2000 m / 6562 ft Overvoltage category I 51 TOSIBOX LOCK 210 | TOSIBOX LOCK 250 Ports 1x USB 2.0, type A, 500 mA maximum load allowed 1 x 24V DC out: 24V DC +/- 5% nominal, always active, non-configurable 1 x RJ-45 WAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X) Total combined maximum current output for digital outputs and 24V DC out 3 x RJ-45 LAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X) LAN3 can be assigned as Service connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X) Ethernet port isolation: 1500 Vrms 1 minute (when connected to is limited to 50mA Software Configurable I/O state Powering requirements 12-48V DC +/-20%, 10.0W max, reverse polarity protected protective ground) WAN connection features Independent of operating systems Physical properties 110 mm x 58 mm x 127 mm / 4.33 x 2.28 x 5.0 (L x W x H) Works in all Internet connections (operator independent) Weight 495 g / 1.09 lbs Supports HTTP proxy servers with and without authentication Firewall friendly Works with dynamic, static and private IP addresses Built-in firewall, NAT Up to 20 concurrent VPN connections VPN throughput up to 30 Mb/s (BF-CBC 128 bit) I/O Specification 2 x digital inputs, galvanic isolation, current limited to 5mA, voltage 0 - 32V nominal, input voltage of 0-5V is interpreted as 0, input voltage over 12V is interpreted as 1 2 x digital outputs, type: transistor sourcing, output voltage 24V DC +/- 5% nominal Operating temperature -20 C +60 C / -4 F +140 F Operating humidity up to 96% RH, non-condensing Storage temperature -40 C +70 C / -40 F +158 F Cast aluminium casing IP protection class: IP20 Maximum operating altitude 2000 m / 6562 ft Overvoltage category I USB modem options TB4GM2EU, TB4GM2AU, TB4GM8EU 52 TOSIBOX LOCK 250 WLAN IEEE 802.11 b/g/n, max. 150 Mbps WEP, WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed, WPA-EAP, WPA2-EAP TKIP/AES encryption Frequency 2.412 2.462 GHz, 11 channels Output power 20 dBm max 53 TOSIBOX LOCK 500 Ports 1x USB 2.0, type A, 500 mA maximum load allowed 1 x RJ-45 WAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X) 3 x RJ-45 LAN connection, 10/100 Mb/s, auto-negotiation (MDI / MDI-X) LAN3 can be assigned as Service connection, 10/100 Mb/s, auto-negotiation

(MDI / MDI-X) Ethernet port isolation: 1500 Vrms 1 minute (when connected to protective ground) WAN connection features Independent of operating systems Works in all Internet connections (operator independent) Supports HTTP proxy servers with and without authentication Firewall friendly Works with dynamic, static and private IP addresses Built-in firewall, NAT Up to 50 concurrent VPN connections VPN throughput up to 70 Mb/s (BF-CBC 128 bit) WLAN IEEE 802.11 b/g/n, max. 150 Mbps WEP, WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed, WPA-EAP, WPA2-EAP TKIP/AES encryption Frequency 2.412 2.462 GHz, 11 channels Output power 20 dBm max I/O Specification 2 x digital inputs, galvanic isolation, current limited to 5mA, voltage 0 - 32V nominal, input voltage of 0-5V is interpreted as 0, input voltage over 12V is interpreted as 1 2 x digital outputs, type: transistor sourcing, output voltage 24V DC +/- 5%

nominal 1 x 24V DC out: 24V DC +/- 5% nominal, always active, non-configurable Total combined maximum current output for digital outputs and 24V DC out is limited to 50mA Software Configurable I/O state Powering requirements 12-48V DC +/-20%, 10.0W max, reverse polarity protected Physical properties 110 mm x 58 mm x 127 mm / 4.33 x 2.28 x 5.0 (L x W x H) Weight 495 g / 1.09 lbs (TBL5*) / 505g / 1.11 lb (TBL5i*) Operating temperature -20 C +60 C / -4 F +140 F Operating humidity up to 96% RH, non-condensing Storage temperature -40 C +70 C / -40 F +158 F Cast aluminium casing IP protection class: IP20 Maximum operating altitude 2000 m / 6562 ft Overvoltage category I USB modem options TB4GM2EU, TB4GM2AU, TB4GM8EU TOSIBOX LOCK 500 - TBL5iA*

Internal modem connection features TBL5iA*

Region: EMEA LTE Cat-6 Up to 300 Mbps DL, 50 Mbps UL Frequency Bands (4G LTE): B1, B2, B3, B4, B5, B7, B12, B13, B20, B25, B26, B29, B41 Supported technology (HSPA+, UMTS) Bands: B1, B2, B3, B4, B5, B8 Dual SIM LTE frequency band support Band Band 1 Band 2 Band 3 Band 4 Band 5 Band 7 Band 8 Frequency (Tx) 19201980 MHz 18501910 MHz 17101785 17101755 824849 MHz Frequency (Rx) 21102170 MHz 19301990 MHz 18051880 MHz 21102155 MHz 869894 MHz 25002570 MHz 26202690 MHz 880915 MHz Band 12 699716 MHz Band 13 777787 MHz Band 20 832862 MHz 925960 MHz 729746 MHz 746756 MHz 791821 MHz Band 25 18501915 MHz 19301995 MHz Band 26 814849 MHz Band 29 n/a 859894 MHz 717728 MHz Band 41 24962690 MHz (TDD) For bandwidth support details, see 3GPP TS 36.521-1 v11.3.0, table 5.4.2.1-1 54 WCDMA frequency bands support Band Band1 Band2 Band3 Band4 Band5 Band8 Frequency (Tx) 19201980MHz Frequency (Rx) 21102170MHz 18501910MHz 17101785MHz 17101755MHz 824849MHz 880915MHz 19301990MHz 18051880MHz 21102155MHz 869894MHz 925960MHz Conducted TX (Transmit) Power tolerances Parameter Cond. tr. p. Notes LTE LTE Band 1, 3, 5, 8, 18, 19,21,28,39

+23 dBm +- 1 dB LTE Band 7, 38, 40, 41

+22 dBm +- 1 dB UMTS Band 1 (IMT 2100 12.2 kbps) Band 5 (UMTS 850 12.2 kbps) Band 6 (UMTS 850 12.2 kbps)

+23 dBm +- 1 dB Connectorized (Class 3) Band 8 (UMTS 900 12.2 kbps) Band 9 (UMTS 1700 12.2 kbps) Band 19 (UMTS 850 12.2 kbps) TD-SCDMA frequency band Band 39

+23 dBm +- 1 dB 55 TOSIBOX LOCK 500 - TBL5iB*

Internal modem connection features TBL5iB*

Region: APAC LTE Cat-6 Up to 300 Mbps DL, 50 Mbps UL Frequency Bands (4G LTE): B1, B3, B5, B7, B8, B18, B19, B21, B28, B38, B39, B40, B41 Supported technology 1 (HSPA+, UMTS) Bands: B1, B5, B6, B8, B9, B19 Supported technology 2 (TD-SCDMA) Band 39 Dual SIM LTE frequency band support Frequency (Tx) 19201980 MHz 17101785 824849 MHz Frequency (Rx) 21102170 MHz 18051880 MHz 869894 MHz Band Band 1 Band 3 Band 5 Band 7 Band 8 WCDMA frequency bands support Band Band 1 Band 5 Band 6 Band 8 Band 9 Frequency (Tx) 19201980 MHz Frequency (Rx) 21102170 MHz 824849 MHz 830840 MHz 880915 MHz 869894 MHz 875885 MHz 925960 MHz 1749.91784.9 MHz 1844.91879.9 MHz Band 19 875890 MHz Conducted TX (Transmit) Power tolerances 830845 MHz Parameter Cond. tr. p. Notes LTE LTE Band 1, 3, 5, 8, 18, 19,21,28,39

+23 dBm +- 1 dB 25002570 MHz 26202690 MHz LTE Band 7, 38, 40, 41

+22 dBm +- 1 dB 880915 MHz Band 18 815830 MHz Band 19 830845 MHz 925960 MHz 860875 MHz 875890 MHz UMTS Band 1 (IMT 2100 12.2 kbps) Band 5 (UMTS 850 12.2 kbps) Band 21 1447.91462.9 MHz 1495.91510.9 MHz Band 28 703748 MHz 758803 MHz Band 38 Band 39 Band 40 Band 41 25702620 MHz (TDD) 18801920 MHz (TDD) 23002400 MHz (TDD) 24962690 MHz (TDD) For bandwidth support details, see 3GPP TS 36.521-1 v11.3.0, table 5.4.2.1-1 Band 6 (UMTS 850 12.2 kbps)

+23 dBm +- 1 dB Connectorized (Class 3) Band 8 (UMTS 900 12.2 kbps) Band 9 (UMTS 1700 12.2 kbps) Band 19 (UMTS 850 12.2 kbps) TD-SCDMA fequency band Band 39

+23 dBm +- 1 dB TOSIBOX LOCK 500 - TBL5iC*

Internal modem connection features TBL5iC*

Region: US/CAN LTE Cat-6 Up to 300 Mbps DL, 50 Mbps UL Frequency Bands (4G LTE): B1, B2, B3, B4, B5, B7, B12, B13, B20, B25, B26, B29, B41 Supported technology (HSPA+, UMTS) Bands: B1, B2, B3, B4, B5, B8 Dual SIM LTE frequency band support Band Band 1 Band 2 Band 3 Band 4 Band 5 Band 7 Band 8 Frequency (Tx) 19201980 MHz 18501910 MHz 17101785 17101755 824849 MHz Frequency (Rx) 21102170 MHz 19301990 MHz 18051880 MHz 21102155 MHz 869894 MHz 25002570 MHz 26202690 MHz 880915 MHz Band 12 699716 MHz Band 13 777787 MHz Band 20 832862 MHz 925960 MHz 729746 MHz 746756 MHz 791821 MHz Band 25 18501915 MHz 19301995 MHz Band 26 814849 MHz Band 29 n/a 859894 MHz 717728 MHz Band 41 24962690 MHz (TDD) For bandwidth support details, see 3GPP TS 36.521-1 v11.3.0, table 5.4.2.1-1 56 WCDMA frequency bands support Band Band1 Band2 Band3 Band4 Band5 Band8 Frequency (Tx) 19201980MHz Frequency (Rx) 21102170MHz 18501910MHz 17101785MHz 17101755MHz 824849MHz 880915MHz 19301990MHz 18051880MHz 21102155MHz 869894MHz 925960MHz Conducted TX (Transmit) Power tolerances Parameter Cond. tr. p. Notes LTE LTE Band 1, 3, 5, 8, 18, 19,21,28,39

+23 dBm +- 1 dB LTE Band 7, 38, 40, 41

+22 dBm +- 1 dB UMTS Band 1 (IMT 2100 12.2 kbps) Band 5 (UMTS 850 12.2 kbps) Band 6 (UMTS 850 12.2 kbps)

+23 dBm +- 1 dB Connectorized (Class 3) Band 8 (UMTS 900 12.2 kbps) Band 9 (UMTS 1700 12.2 kbps) Band 19 (UMTS 850 12.2 kbps) TD-SCDMA frequency band Band 39

+23 dBm +- 1 dB 57 TOSIBOX LOCK 500 - TBL5iD*

Internal modem connection features TBL5iD*

Region: US/CAN CBRS LTE Cat12 / carrier aggregation Up to 600 Mbps DL, 100 Mbps UL Frequency Bands (4G LTE): B1, B2, B3, B4, B5, B7, B8, B9, B12, B13, B14, B18, B19, B20, B26, B29, B30, B32, B41, B42, B43, B46, B48, B66 Dual SIM LTE frequency band support Band Band 1 Band 2 Band 3 Band 4 Band 5 Band 7 Band 8 Band 9 Frequency (Tx) 19201980 MHz Frequency (Rx) 21102170 MHz 18501910 MHz 17101785 MHz 17101755 MHz 824849 MHz 19301990 MHz 18051880 MHz 21102155 MHz 869-894 MHz 25002570 MHz 26202690 MHz 880915 MHz 925960 MHz 1749.91784.9 MHz 1844.91879.9 MHz Band 12 699716 MHz Band 13 777787 MHz Band 14 788798 MHz Band 18 815830 MHz Band 19 830845 MHz Band 20 832862 MHz Band 26 814849 MHz 729746 MHz 746756 MHz 758768 MHz 860875 MHz 875890 MHz 791821 MHz 859894 MHz Band 29 n/a Band 30 23052315 MHz Note: B30 Tx is disabled. 717728 MHz 23502360 MHz Band 32 n/a 14521496 MHz Band 41 Band 42 Band 43 24962690 MHz (TDD) 34003600 MHz (TDD) 36003800 MHz (TDD) Band 46 n/a 51505925 MHz (TDD) Band 48 35503700 MHz (TDD) Band 66 17101780 MHz 21102200 MHz For bandwidth support details, see 3GPP TS 36.521-1 v11.3.0, table 5.4.2.1-1 WCDMA frequency bands support Band Band1 Band2 Band4 Band5 Band6 Frequency (Tx) 19201980MHz Frequency (Rx) 21102170MHz 18501910MHz 17101755MHz 824849MHz 830840 MHz 19301990MHz 21102155MHz 869894MHz 875885 MHz 58 Conducted TX (Transmit) Power tolerances Parameter Conducted Tx power Notes LTE LTE bands 1, 2, 3, 4, 5, 8, 9, 12, 13, 14, 18, 19, 20, 26 ,66

+23 dBm +- 1 dB LTE Band 7, 41 Single cell: +22 dBm +- 1 dB 0.8 dB offset for UL CA hardcoded UL CA: +22.8 dBm +- 1 dB by chipset manufacturer LTE bands 42,43,48

+22 dBm +- 1 dB UMTS Band 1 (IMT 2100 12.2 kbps) Band 2 (UMTS 1900 12.2 kbps) Band 4 (AWS 1700/2100 12.2 kbps) Band 5 (UMTS 850 12.2 kbps) Band 6 (UMTS 800 12.2 kbps) Band 8 (UMTS 900 12.2 kbps) Band 9 (UMTS 1700 12.2 kbps) Band 19 (UMTS 800 12.2 kbps) TD-SCDMA frequency band Band 39

+23 dBm +- 1 dB Connectorized (Class 3)

+23 dBm +- 1 dB TOSIBOX POWER SOURCE SPECIFICATION Power model ATS024T-W240V TOSIBOX KEY 2048 bit RSA key in the cryptographic module 59 Input Frequency Output V Output A Output max 100-240 V AC 50-60 Hz 24 V 1 A 24 W Operating temperature

-20 C +70 C / -4F 158 F Operating humidity 20% - 80% RH Storage temperature

-20 C +80 C / -4F 176 F Storage humidity 10% - 90% RH 4 GB or larger flash memory storage for TOSIBOX Key software and settings USB 2.0 interface, type A Standard CSP/PKCS#11 Supported operating systems:

Windows 10 Windows 8.1 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019 Mac OS X 10.14 (Mojave), Mac OS X 10.15 (Catalina), Mac OS X 11 (Big Sur) Physical properties 83 mm x 22 mm x 10 mm / 3.27 x 0.87 x 0.39 (L x W x H) Weight 27 g / 0.06 lbs Casing aluminium + plastic Operating temperature 0 C +70 C / +32 F +158 F Storage temperature -20 C +80 C / -4 F +176 F 60 10. LIMITED WARRANTY Subject to the exclusions set forth below, Tosibox Oy will repair or replace, at its option without charge, any TOSIBOX product which fails due to a defect in material or workmanship within 24 months following the initial consumer purchase, except for the Tosibox 175 the warranty is 12 months from the initial consumer purchase. This warranty does not apply to water damage, abuse or misuse of unauthorized accessories, unauthorized service or modification or altered products. This warranty does not include the cost of labor for removal or re-installation of the product. ANY IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, SHALL BE LIMITED AS SET FORTH HEREIN AND TO THE DURATION OF THE LIMITED WARRANTY, OTHERWISE THE REPAIR OR REPLACEMENT AS PROVIDED UNDER THIS EXPRESS LIMITED WARRANTY IS THE EXCLUSIVE REMEDY OF THE CONSUMER AND IS PROVIDED IN LIEU OF ALL OTHER WARRANTIES, EXPRESS OR IMPLIED. IN NO EVENT SHALL TOSIBOX OY BE LIABLE, WHETHER IN CONTRACT OR TORT (INCLUDING BUT NOT LIMITED TO NEGLIGENCE, GROSS NEGLIGENCE, BODILY INJURY, PROPERTY DAMAGE AND DEATH) FOR DAMAGES IN EXCESS OF THE PURCHASE PRICE OF THE PRODUCT OR ACCESSORY, OR FOR ANY INDIRECT, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR LOSS OF REVENUE OR PROFITS, LOSS OF BUSINESS, LOSS OF INFORMATION OR DATA OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN CONNECTION WITH THE ABILITY OR INABILITY TO USE THE PRODUCTS OR ACCESSORIES TO THE FULL EXTENT THESE DAMAGES MAY BE DISCLAIMED BY LAW. The complete information about Tosibox Terms and Conditions is available at www.tosibox.com/warranty For Product Purchased in the USA:

Performance of any obligation under this warranty may be obtained by returning the warranted product, prepaid freight, along with proof of purchase to:

Tosibox, Inc. 7778 McGinnis Ferry Road Suite 301 Suwanee, GA 30024 This warranty gives you specific legal rights, and you may also have other rights, which vary from state to state. Note: The above warranty applies only to merchandise purchased in the United States of America or any of the territories or possessions thereof, or from a U.S. Military exchange. For Product Purchased in Canada:

Performance of any obligation under this warranty may be obtained by returning the warranted product, along with proof of purchase, to your place of purchase in Canada. This warranty gives you specified legal rights. Additional warranty rights may be provided by law in some within Canada 61 11. LEGAL NOTICES 11. MENTIONS LGALES 2019 Tosibox Oy. All rights reserved. 2019 Tosibox Oy. Tous les droits sont rservs. Reproduction, distribution or storage of part or all of the content of this document without the prior written permission of Tosibox is prohibited. La reproduction, la distribution ou le stockage de tout ou partie du contenu de ce document sans lautorisation crite pralable de Tosibox est interdite. Because of continuous product development, Tosibox reserves the right to change and improve any product mentioned herein without prior notice. En raison du dveloppement continu du produit, Tosibox se rserve le droit de modifier et damliorer tous produits mentionns dans le prsent document sans pravis. Tosibox shall not take responsibility of any loss of information or income or any special, incidential, consequential or indirect damages. Tosibox ne pourra tre tenu responsable de toutes les pertes dinformations ou de revenus ou autres dommages, indirects ou conscutifs. The contents of this document are provided as is. No warranties of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose, are made in relation to the accuracy, reliability or contents of this document. Tosibox reserves the right to revise this document or withdraw it at any time wihout prior notice. Tosibox products contain technology that is based on open source software. When requested by the customer, Tosibox will deliver more detailed information from the parts that the licenses require. Source code requests can be submitted to:

sourcecode.request@tosibox.com Tosibox Oy Teknologiantie 12 A 90590 OULU, FINLAND Aucune garantie sous quelque forme que ce soit, explicite ou implicite, y compris, mais sans y limiter les garanties implicites daptitude la commercialisation, ladquation un usage particulier, nest donne en ce qui concerne lexactitude, la fiabilit ou le contenu de ce document. Tosibox se rserve le droit de rviser ce document ou de le retirer tout moment sans pravis. Les produits Tosibox contiennent une technologie base sur un logiciel open source. la demande du client, Tosibox fournira des informations plus dtailles sur les composants requis par les licences. Les demandes de code source peuvent tre envoyes :

sourcecode.request@tosibox.com Tosibox Oy Teknologiantie 12 A 90590 OULU, FINLANDE 62 12. DECLARATIONS TOSIBOX LOCK 100 EU DECLARATION OF CONFORMITY Hereby, Tosibox Oy declares that the radio equipment type Lock 100 is in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following internet address:

www.tosibox.com/documentation-and-downloads FEDERAL COMMUNICATION COMMISSION INTERFERENCE STATEMENT This device complies with FCC part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Tosiboc Inc. 7778 McGinnis Ferry Road, Suite 301 Suwanee, GA 30024 Tel. +1 478 419-8674, www.tosibox.com FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. FCC ID: 2AHCNLOCK100 63 TOSIBOX LOCK 200 EU DECLARATION OF CONFORMITY Hereby, Tosibox Oy declares that the radio equipment type Lock 200 is in compliance with Directives 2014/35/EU and 2014/30/EU. The full text of the EU declaration of conformity is available at the following internet address:

www.tosibox.com/documentation-and-downloads UL DECLARATION OF CONFORMITY This device is UL listed in USA and Canada with UL file number E474664. R 64 TOSIBOX LOCK 150 EU DECLARATION OF CONFORMITY Hereby, Tosibox Oy declares that the radio equipment type Lock 150 is in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following internet address:

www.tosibox.com/documentation-and-downloads/

UL DECLARATION OF CONFORMITY This device is UL listed in USA and Canada with UL file number E507259. FEDERAL COMMUNICATION COMMISSION INTERFERENCE STATEMENT This device complies with FCC part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Tosiboc Inc. 7778 McGinnis Ferry Road, Suite 301 Suwanee, GA 30024 Tel. +1 478 419-8674, www.tosibox.com FCC CAUTION: Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. This equipment should be installed and operated with a minimum distance of 20 cm between the antenna and the user or bystanders. FCC ID: 2AHCN-LOCK150 IC: 25009-LOCK150 R E507259 65 TOSIBOX LOCK 150 INDUSTRY CANADA STATEMENT This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions:

(1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. This radio transmitter IC: 25009-LOCK150 has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Lock 150: Wi-Fi monopole antenna max peak gain 2.0 dBi. Under ISED regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication!

This equipment should be installed and operated with a minimum distance of 20 cm between the antenna and the user or bystanders. Le prsent appareil est conforme aux CNR dIndustrie Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes : (1) lappareil ne doit pas produire de brouillage, et (2) lutilisateur de lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. Le CI metteur radio: 25009-LOCK150 a t approuv par ISED pour fonctionner avec les types dantennes numrs ci-dessous avec le gain maximal admissible indiqu. Les types dantenne non inclus dans cette liste, ayant un gain suprieur au gain maximal indiqu pour ce type, sont strictement interdits dutilisation avec cet appareil. Lock 150: gain de crte maximum de lantenne monople Wi-Fi de 2,0 dBi. Selon les rglementations ISED, cet metteur radio ne peut fonctionner quavec une antenne dun type et dun gain maximal (ou infrieur) approuv pour lmetteur par ISED. Afin de rduire les interfrences radio potentielles avec dautres utilisateurs, le type dantenne et son gain doivent tre choisis de manire ce que la puissance rayonne isotrope quivalente (par exemple) ne soit pas suprieure celle ncessaire pour une bonne communication!

Cet quipement doit tre install et utilis avec une distance minimale de 20 cm entre lantenne et lutilisateur ou des tiers. 66 TOSIBOX 175 EU DECLARATION OF CONFORMITY Hereby, Tosibox Oy declares that the radio equipment type 175 is in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at www.tosibox.com/documentation-and-downloads This equipment should be installed and operated with a minimum distance of 20cm between the antenna and the user or bystanders. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. Patented, incl. US8831020, US9900178. Patents pending, incl. US14/119753, US14/39015 FEDERAL COMMUNICATION COMMISSION INTERFERENCE STATEMENT This device complies with FCC part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Tosiboc Inc. 7778 McGinnis Ferry Road, Suite 301 Suwanee, GA 30024 Tel. +1 478 419-8674, www.tosibox.com FCC CAUTION: Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. TOSIBOX 175 FCC ID: 2AHCNLOCK175 IC:

This radio device has been tested to operate with the external antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. TOSIBOX 175: Wi-Fi monopole antenna, 50 ohm, max peak gain 0.4 dBi. 67 TOSIBOX LOCK 250 EU DECLARATION OF CONFORMITY Hereby, Tosibox Oy declares that the radio equipment type Lock 250 is in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following internet address:

www.tosibox.com/documentation-and-downloads FEDERAL COMMUNICATION COMMISSION INTERFERENCE STATEMENT This device complies with FCC part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. UL DECLARATION OF CONFORMITY This device is UL listed in USA and Canada with UL file number E497243. R Tosiboc Inc. 7778 McGinnis Ferry Road, Suite 301 Suwanee, GA 30024 Tel. +1 478 419-8674, www.tosibox.com FCC CAUTION: Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. Lock 250 FCC ID: 2AHCNLOCK500I IC: 25009-LOCK500IC This radio device has been tested to operate with the external antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Lock 250: Wi-Fi monopole antenna, 50 ohm, max peak gain 2.0 dBi. 68 TOSIBOX LOCK 250 INDUSTRY CANADA STATEMENT This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions:

(1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. This radio transmitter IC: 25009-LOCK500IC has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Lock 250: Wi-Fi monopole antenna, 50 ohm, max peak gain 2.0 dBi. Under ISED regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication!

This equipment should be installed and operated with a minimum distance of 20 cm between the antenna and the user or bystanders. Le prsent appareil est conforme aux CNR dIndustrie Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes : (1) lappareil ne doit pas produire de brouillage, et (2) lutilisateur de lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. Le CI metteur radio: 25009-LOCK500IC a t approuv par ISED pour fonctionner avec les types dantennes numrs ci-dessous avec le gain maximal admissible indiqu. Les types dantenne non inclus dans cette liste, ayant un gain suprieur au gain maximal indiqu pour ce type, sont strictement interdits dutilisation avec cet appareil. Lock 250: antenne Wi-Fi unipolaire, 50 ohm, gain de crte max 2.0 dBi. Selon les rglementations ISED, cet metteur radio ne peut fonctionner quavec une antenne dun type et dun gain maximal (ou infrieur) approuv pour lmetteur par ISED. Afin de rduire les interfrences radio potentielles avec dautres utilisateurs, le type dantenne et son gain doivent tre choisis de manire ce que la puissance rayonne isotrope quivalente (par exemple) ne soit pas suprieure celle ncessaire pour une bonne communication!

Cet quipement doit tre install et utilis avec une distance minimale de 20 cm entre lantenne et lutilisateur ou des tiers. TOSIBOX LOCK 500 EU DECLARATION OF CONFORMITY Hereby, Tosibox Oy declares that the radio equipment type Lock 500 is in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following internet address:

www.tosibox.com/documentation-and-downloads UL DECLARATION OF CONFORMITY This device is UL listed in USA and Canada with UL file number E497243. R 69 FEDERAL COMMUNICATION COMMISSION INTERFERENCE STATEMENT This device complies with FCC part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Tosiboc Inc. 7778 McGinnis Ferry Road, Suite 301 Suwanee, GA 30024 Tel. +1 478 419-8674, www.tosibox.com FCC CAUTION: Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. Lock 500 FCC ID: 2AHCNLOCK500I IC: 25009-LOCK500IC Lock 500iC FCC ID: 2AHCNLOCK500I, contains FCC ID: N7NEM7455 IC: 25009-LOCK500IC, contains IC: 2417C-EM7455 Lock 500iD FCC ID: 2AHCNLOCK500I, contains FCC ID: N7NEM75S IC: 25009-LOCK500IC, contains IC: 2417C-EM75S This radio device has been tested to operate with the external antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Lock 500: Wi-Fi monopole antenna, 50 ohm, max peak gain 2.0 dBi. Lock 500iC, Lock 500iD: Wi-Fi monopole antenna, 50 ohm, max peak gain 2.0 dBi, LTE dipole antenna, 50 ohm, max peak gain 3.0 dBi. 70 Le CI metteur radio: 25009-LOCK500IC a t approuv par ISED pour fonctionner avec les types dantennes numrs ci-dessous avec le gain maximal admissible indiqu. Les types dantenne non inclus dans cette liste, ayant un gain suprieur au gain maximal indiqu pour ce type, sont strictement interdits dutilisation avec cet appareil. Lock 500: antenne Wi-Fi unipolaire, 50 ohm, gain de crte max 2.0 dBi. Lock 500iC, Lock 500iD: antenne Wi-Fi unipolaire, 50 ohm, gain de crte max 2.0 dBi, LTE antenne bipolaire, 50 ohm, gain de crte max 3.0 dBi. Selon les rglementations ISED, cet metteur radio ne peut fonctionner quavec une antenne dun type et dun gain maximal (ou infrieur) approuv pour lmetteur par ISED. Afin de rduire les interfrences radio potentielles avec dautres utilisateurs, le type dantenne et son gain doivent tre choisis de manire ce que la puissance rayonne isotrope quivalente

(par exemple) ne soit pas suprieure celle ncessaire pour une bonne communication!

Cet quipement doit tre install et utilis avec une distance minimale de 20 cm entre lantenne et lutilisateur ou des tiers. TOSIBOX LOCK 500 INDUSTRY CANADA STATEMENT This device complies with Industry Canada license-exempt RSS standard(s). Operation is subject to the following two conditions: (1) this device may not cause interference, and (2) this device must accept any interference, including interference that may cause undesired operation of the device. This radio transmitter IC: 25009-LOCK500IC has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Lock 500: Wi-Fi monopole antenna, 50 ohm, max peak gain 2.0 dBi. Lock 500iC, lock 500iD: Wi-Fi monopole antenna, 50 ohm, max peak gain 2.0 dBi, LTE dipole antenna, 50 ohm, max peak gain 3.0 dBi. Under ISED regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication!

This equipment should be installed and operated with a minimum distance of 20 cm between the antenna and the user or bystanders. Le prsent appareil est conforme aux CNR dIndustrie Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes : (1) lappareil ne doit pas produire de brouillage, et (2) lutilisateur de lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. 71 72 Teknologiantie 12A FIN-90590 Oulu www.tosibox.com Copyright Tosibox Oy 2021

Made in Finland IP: 10.10.10.xxx www.tosibox.com Password: abc1 FCC ID: 2AHCNLOCK175 Contains FCC ID: 2ATM8EG25G DC input voltage range:

1000 mA ve Vhis device complies with Part 15 of the FCC Rules. Operation is subject to the following twe conditions: (1)

= This device may not cause harmfu!

interference, and (2) this device must

/accept any interference received, including interference that may cause undesired operation.

eknologiantie 12 A 90590 Oulu Campusallee 3265/7 Lemgo osibox, Inc. 7778 McGinnis Ferry Road Suwanee, GA 30024 http://www.tosibox.com 10/19/2021 l Laboratory Dr. Research Triangle Park, NC 27/09 USA To whom It may concern:

|, the undersigned, hereby authorize to act on our behalf in all manners relating to application for equipment authorization, including signing of all documents relating to these matters. Any and all acts carried out by UL Verification Services Inc. on our behalf shall have the same effect as acts of OUr OWN.

|, the undersigned, hereby certify that we are not subject to a denial of federal benefits, that includes FCC benefits, pursuant to Section 5301 of the Anti Drug Abuse Act of 1988, 21 U.S.C. 853(a). In authorizing sentative

, we still recognize that we are responsible to:

fulfill the requirements for the scope of certification requested, including implementing any appropriate changes requested by UL erification Services Telecommunications Certification Body (TCB) and / or the FCC;

Supply any and all information needed for the evaluation of the products for which certification make claims regarding certification only in respect of the sco pe for which certification has been granted not use product certification in such a manner as to bring the into disrepute not make any statement regarding product certification which the TCB or FCC may consider misleading or unauthor discontinue use of all advertising matter that contains any reference thereto and complies with any and all actions required by the FCC upon suspension or cancellation of certification certification only to indicate that products are certified |

n conformity with specified endeavor to ensure that no certificate or report or any part thereof Is used in a misleading manner, and any copies of the grants/certificates shall be reproduced in their entirety with the requirements of the and

, Including the use of marks and label information prescribed for the scope of certification making reference to product certification In communication media such as documents, brochure or advertis comply with the requirements for certification, supply any information needed for evaluation of products to be certified and, where applicable, make provision for the participation of observers products marketed under the scope of the requested certification continue to requirements provide a sample of a production unit for testing within 30 days of the request should this product be selected as part of either the TCBs or the FCC's market surveillance requirements;

keep arecord of all complaint s relating to product's compliance with requirements of relevant Standard; make records available to UL when requested; take appropriate action with respect to such complaints and any deficiencies found in the product that affect compliance

eknologiantie 12 A 90590 Oulu Campusallee 3265/7 Lemgo osibox, Inc. 7778 McGinnis Ferry Road Suwanee, GA 30024 http://www.tosibox.com 10/19/2021 Subject : Request to change in Identification. This Change of Identification request applies for a new FCC ID: as established in 47CFR 2.933(b) for a currently approved device. This application by ill establish a new FCC ID:

CAHCNLOCK175 code. The original grant ill remain in effect. Per 2.933(b) The original identification is The original grant date is 12/24/2020 The equipment is electrically identical. Only the model name, trade name, and FCC ID number are different. The original test results are applicable and representative of this changed device. The following files are submitted ith this application Cover Letter External Photos FCC ID label format and location sincerely, Technology Tosibox Oy Teknologiantie 12 A 90590 Oulu

GL Technologies (Hong Kong) Limited Date: 10/20/2021 Subject : Request to change in Identification. Dear FCC / TCB, This letter grants authorization for representatives of Tosibox Oy to apply for a change in identification as specified under 47CFR2.933 of the FCC rules. This authorization applies to FCC ID: 2AFIW-X300BC4 assigned to GL Technologies (Hong Kong) Limited We are aware that Tosibox Oy intends to market the above referenced product under their own FCC ID: 2AHCNLOCK175 Sincerely, Sincerely, AddressFLAT/RM 203 2/F BUILDING 19W 19 SCIENCE PARK WEST AVENUE SHATIN NT Shatin Hong Kong